Pivotal Software Spring Security Oauth vulnerabilities
4 known vulnerabilities affecting pivotal_software/spring_security_oauth.
Total CVEs
4
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2019-11269MEDIUMCVSS 5.4PoC≥ 2.0.0, < 2.0.18≥ 2.1.0, < 2.1.5+2 more2019-06-12
CVE-2019-11269 [MEDIUM] CWE-601 CVE-2019-11269: Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 p
Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code gr
nvd
CVE-2019-3778MEDIUMCVSS 6.5PoC≥ 2.0.0, < 2.0.17≥ 2.1.0, < 2.1.4+2 more2019-03-07
CVE-2019-3778 [MEDIUM] CWE-601 CVE-2019-3778: Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4,
Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code gra
nvd
CVE-2018-15758HIGHCVSS 8.1≤ 1.0.5≥ 2.0.0, < 2.0.16+3 more2018-10-18
CVE-2018-15758 [CRITICAL] CVE-2018-15758: Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3,
Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can craft a request to the approval endpoint that can modify the previously saved authorization requ
nvd
CVE-2018-1260CRITICALCVSS 9.8≤ 2.0.14≥ 2.1, ≤ 2.1.1+2 more2018-05-11
CVE-2018-1260 [CRITICAL] CWE-94 CVE-2018-1260: Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prio
Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to the authorization endpoint that can lead to remote code execution when the resource owner is f
nvd