• 朋友圈，提供博客收录、文章聚合展示等功能，欢迎来这里发现有趣的博客并尝试与博主成为朋友！如果你拥有一个独立博客，就赶快「申请加入」吧，逾 1 位博友正在等你哦！

CVE-2025-22223 - Medium - CVE-2025-22223: Spring Security authorization bypass for method security annotations on parameterized types

CVE-2025-22228 - High - CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length

CVE-2024-38829 - Low - CVE-2024-38829: Spring LDAP Spring LDAP sensitive data exposure for case-sensitive comparisons

CVE-2024-38827 - Medium - CVE-2024-38827: Spring Security Authorization Bypass for Case Sensitive Comparisons

CVE-2024-38821 - Medium - Authorization Bypass of Static Resources in WebFlux Applications

CVE-2024-38820 - Low - CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception

CVE-2024-38819 - High - CVE-2024-38819: Path traversal vulnerability in functional web frameworks (2nd report)

CVE-2024-38828 - Medium - CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

cve-2024-38816 - High - CVE-2024-38816: Path traversal vulnerability in functional web frameworks

cve-2024-38807 - Medium - CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader