Spring Authorization Server vulnerabilities
1 known vulnerability in Spring Authorization Server from Spring. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest first
- 8.2 High severity
Spring Authorization Server: Improper Neutralization of Input During Web Page Generation
Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request containing a malicious value that is stored server-side and