Headline
GHSA-hmqf-wpq9-jq83: Spring Security Missing Authorization vulnerability
Missing Authorization When Using @AuthorizeReturnObject in Spring Security 6.3.0 and 6.3.1 allows attacker to render security annotations inaffective.
Spring Security Missing Authorization vulnerability
Moderate severity GitHub Reviewed Published Aug 20, 2024 to the GitHub Advisory Database • Updated Aug 20, 2024