CVE-2023-34034
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.1epss 4.0%
from disclosure to weapon136 days
Published on NVDJul 19
1st PoC+136d
exploitation probability
4.0%top 10% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Using "**" as a pattern in Spring Security configuration
for WebFlux creates a mismatch in pattern matching between Spring
Security and Spring WebFlux, and the potential for a security bypass.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
n/a · Spring Securitypublic PoCs found — 1
githubgithub.com/hotblac/cve-2023-34034★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.