Vendor/product archive

pivotal / spring_security_oauth CVEs

Beta · best-effort

2 CVEs tagged to pivotal / spring_security_oauth — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to pivotal vendor archive

CVE-2022-22969

Published Apr 21, 2022

<Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of th…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2016-4977

Published May 25, 2017

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spr…

CVSS 8.8 · High

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1