Product

org.springframework.security/spring-security-cas vulnerabilities

1 published CVE affecting org.springframework.security/spring-security-cas, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.springframework.security/spring-security-cas CVEs

Newest publication first

CVE-2019-11272 PlaintextPasswordEncoder authenticates encoded passwords that are null
Published 2019-06-26

HighCVSS 7.3 EPSS 1.4%

Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a null encoded password,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.springframework.security/spring-security-cas vulnerabilities

Latest org.springframework.security/spring-security-cas CVEs

CVE-2019-11272 PlaintextPasswordEncoder authenticates encoded passwords that are null