We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. You are not affected if you are not using @EnableMethodSecurity, or you do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods
Reserved 2025-01-02 | Published 2025-03-24 | Updated 2025-03-24 | Assigner vmwareCWE-290 Authentication Bypass by Spoofing
spring.io/security/cve-2025-22223
Support options
