TZCERT-SU-24-0308 (Spring Security Update)

Imechapishwa: Mar 21, 2024 13:13

Reference No: TZCERT-SU-24-0308

Spring has released security updates to address vulnerabilities in Spring Security and Spring Authorization Server. Exploitation of these vulnerabilities may allow an attacker to bypass authentication.

Users and administrators are encouraged to review Spring Security Advisories cve-2024-22257 and cve-2024-22258 and apply necessary updates.