Investigate vulnerability: Authorization bypass in Spring Security
Issue created from vulnerability 17
Description:
In Spring Security versions 5.5.6 and 5.5.7 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with . in the regular expression are possibly vulnerable to an authorization bypass.
- Severity: critical
- Location: pom.xml
Solution:
Upgrade to versions 5.4.11, 5.5.7, 5.6.4 or above.
Identifiers:
- CVE-2022-22978
- GHSA-hh32-7344-cg2f
- Gemnasium-3f43cbf8-0b45-47ac-a1ea-fe056d329526
- CWE-1035
- CWE-937
- CWE-863
- CWE-285
Links:
- https://github.com/advisories/GHSA-hh32-7344-cg2f
- https://github.com/anchore/grype/issues/2158
- https://github.com/spring-projects/spring-security
- https://github.com/spring-projects/spring-security/blob/main/web/src/main/java/org/springframework/security/web/util/matcher/RegexRequestMatcher.java
- https://nvd.nist.gov/vuln/detail/CVE-2022-22978
- https://security.netapp.com/advisory/ntap-20220707-0003
- https://spring.io/security/cve-2022-22978
- https://tanzu.vmware.com/security/cve-2022-22978
- https://www.oracle.com/security-alerts/cpujul2022.html
Scanner:
- Name: GitLab SBoM Vulnerability Scanner