Skip to content

Product

org.springframework.security/spring-security-oauth2-client vulnerabilities

2 published CVES affecting org.springframework.security/spring-security-oauth2-client, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.springframework.security/spring-security-oauth2-client CVEs

Newest publication first

  1. CVE-2022-31690 spring-security-oauth2-client vulnerable to Privilege Escalation

    Published
    HighCVSS 8.1 EPSS 1.3%

    Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client (via the browser) to the Authori...

  2. CVE-2021-22119 Resource Exhaustion in Spring Security

    Published
    HighCVSS 7.5 EPSS 6.0%

    Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client Web and WebFlux application. A malicious...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.