CVE-2022-22978

Aliases:GHSA-hh32-7344-cg2f
Advisory lineage Upstream: 0 Downstream: 2
Modified
Published: 19 May 2022, 00:00
Last modified:03 Aug 2024, 03:28

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
90.22% CRITICAL
90% probability -0.18%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 May 2022, 00:00
Published
Vulnerability first disclosed
03 Aug 2024, 03:28
Last Modified
Vulnerability information updated

Description

In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 90.22%• Percentile: 100%

Techniques & Countermeasures

  • CWE-863•Incorrect Authorization

    The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Affected Systems

  • org.springframework.security•spring-security-core

    ≥ 5.5.0, < 5.5.7 | ≥ 5.6.0, < 5.6.4 | < 5.4.11

  • org.springframework.security•spring-security-web

    ≥ 5.5.0, < 5.5.7 | ≥ 5.6.0, < 5.6.4 | < 5.4.11

  • netapp•active_iq_unified_manager

    na

  • oracle•financial_services_crime_and_compliance_management_studio

    8.0.8.2.0 | 8.0.8.3.0

  • vmware•spring_security

    < 5.5.7 | ≥ 5.6.0, < 5.6.4

References (8)