Spring Security Advisories

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and responsibly reported by Nicholas Starke from Aruba Threat Labs. History 2018-10-16: Initial vulnerability report published.

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and responsibly reported by Alvaro Muñoz (@pwntester) from Micro Focus. References Spring Security OAuth Read more

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and responsibly reported by Peter Stöckli of Alphabot Security, Switzerland. History 2018-09-11: Initial vulnerability report published.

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and reported by Meyyalagan Chandrasekaran. References “Deprecate JSONP support and update…

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and reported by Mariusz Łuciów, Ocado Technology. History 2018-06-14: Initial vulnerability report published.

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and responsibly reported by the Snyk Security Research Team and Abago Forgans. History 2018-05-11: Initial vulnerability report published

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and responsibly reported by Muneaki Nishimura (nishimunea) of Recruit Technologies Co., Ltd. References Example

Description Affected Spring Products and Versions Mitigation Credit This issue was identified and responsibly reported by Philippe Arteau from GoSecure. References Spring Security OAuth