Fluid Attacks Database

Description

Unverified Password Change

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
maven	org.springframework:spring-core	>=4.1.0 <=4.1.5 \|\| >=4.2.0 <=4.2.12	4.3.0.release
maven	org.springframework.security:spring-security-cas	>=0 <4.2.13.release	4.2.13.release
maven	org.springframework.security:spring-security-core	>=0 <4.2.13	4.2.13

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.