https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:03:40 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-801 certfr-2021-avi-801 https://cve.radiocsirt.org/vuln/certfr-2021-avi-801 https://cve.radiocsirt.org/vuln/euvd-2026-22676 EUVD-2026-22676 https://cve.radiocsirt.org/vuln/euvd-2026-22676 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22112 <p>Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application&#39;s intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.</p> <p>Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application&#39;s intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22112 https://cve.radiocsirt.org/vuln/ghsa-gq28-h5vg-8prx <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-bom, Maven: org.springframework.security:spring-security-web</p> <p>Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application&#39;s intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.</p> <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-bom, Maven: org.springframework.security:spring-security-web</p> <p>Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application&#39;s intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-gq28-h5vg-8prx https://cve.radiocsirt.org/vuln/gsd-2021-22112 gsd-2021-22112 https://cve.radiocsirt.org/vuln/gsd-2021-22112 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375