| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.security:spring-security-core | ≥ 6.4.0, < 6.4.4 | 6.4.4 |
Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass.
You are not affected if you are not using @EnableMethodSecurity, or you do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free