CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
2 CVEs tagged to vmware / spring_grpc — 0 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.
The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain inf…
When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthentic…