-
## CVE-2019-10172 - High Severity Vulnerability
Vulnerable Library - jackson-mapper-asl-1.9.13.jar
Data Mapper package is a high-performance data binding package
built on Jackson JSON processor
Libr…
-
- Configure JAVA to
```
└─(15:30:27)──> java -version ──(Mon,Apr22)─┘
java version "21.0.1" 2023-10-17
Java(TM) SE Ru…
-
**요청한 기능이 어떤 문제 및 어떤 향상을 가져다 주는지 기술해 주세요.**
백엔드 Spring Security 가 적용되었습니다. 이제 인증과 인가를 적용할 수 있습니다.
**당신이 고려한 대안을 설명해주세요**
안드로이드측에서도 변경된 API를 적용해야합니다.
**!!!! 주소와 parameter가 변경된 API가 매우 많습니다!!!! 꼭…
-
Bom dia, Gleyson
Tudo bem?
Eu estou fazendo o bootcampo do Claro Java com SpringBoot 2024 - nas aulas do curso "Spring Security com JWT" :
JWT-JSON Web Token - Parte 3
No arquivo "JWTCreat…
-
**Describe the bug**
HttpSecurity configuration with `securityMatcher` and `oauth2Login(withDefaults())` leads to 404 for _some_ OAuth2 endpoints.
**To Reproduce**
1. Clone this repo: https:/…
-
I found an exception processing static resources from spring-security-ui plugin. To reproduce the issue you only need to create a fresh new grails project (I'm using Grails 3.1.10) and add the followi…
-
Vulnerable Library - spring-security-config-4.0.1.RELEASE.jar
spring-security-config
Library home page: http://spring.io/spring-security
Path to dependency file: /pom.xml
Path to vulnerable library:…
-
When using `org.openrewrite.java.security:OwaspTopTen` recipe, it call `org.openrewrite.java.security.spring.CsrfProtection` recipe that use deprecated `WebSecurityConfigurerAdapter` Spring class.
Wh…
-
## CVE-2022-27772 - High Severity Vulnerability
Vulnerable Library - spring-boot-1.4.7.RELEASE.jar
Spring Boot
Library home page: http://www.spring.io
Path to dependency file: /operation-expert/pom.…
-
**Describe the bug**
Apparently, neither the ID token nor the `userinfo` are updated during the refresh token flow in Spring clients with `oauth2Login`. This has at least two consequences:
- the pri…