Description

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

Remediation

References

CVE-2018-1258

Related Vulnerabilities

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Multiple Vulnerabilities (2.0.15)

MySQL CVE-2015-4858 Vulnerability (CVE-2015-4858)

WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.10.3)

PHP Other Vulnerability (CVE-2007-1454)

WordPress Plugin AllWebMenus WordPress Menu 'abspath' Parameter Remote File Include (1.1.3)

Severity

High

Classification

CVE-2018-1258 CWE-863 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities