Critical Authorization Bypass Vulnerability in libspring-java Package
Summary
UBUNTU-CVE-2022-31692: Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Affects libspring-java versions 3.0.6.RELEASE-10 – 3.0.6.RELEASE-9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libspring-java package is a core component of the Spring Framework, which provides comprehensive infrastructure support for developing Java applications. It includes various modules such as Spring AOP, Spring Beans, Spring Context, and more, enabling developers to build robust and scalable applications. However, recent vulnerabilities have been identified that could compromise the security of applications relying on this package.
Vulnerability Detail
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9, are susceptible to an authorization rules bypass via forward or include dispatcher types. This vulnerability arises when an application expects Spring Security to enforce security on forward and include dispatcher types, but it fails to do so. The ramifications include unauthorized access to higher privilege-secured endpoints, potentially leading to data breaches and unauthorized actions within the application. The vulnerability is particularly critical for applications that configure the FilterChainProxy to apply to forward and/or include requests, as well as those using the AuthorizationFilter.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can configure your application to restrict the use of forward and include dispatcher types until the package is updated. This can be done by modifying the security configuration to exclude these dispatcher types from being processed by Spring Security.
Conclusion
In summary, the libspring-java package has a critical vulnerability that could lead to authorization bypass, allowing unauthorized access to sensitive parts of applications. It is crucial to update to the latest patched version to mitigate this risk and ensure the security of your applications.
See every vulnerability recorded for libspring-java →
FAQ
The CVSS score of this vulnerability is 9.8, indicating a critical level of severity.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The potential consequences include unauthorized access to sensitive data and actions within the application, leading to data breaches and compromised security.
Yes, there are patched versions available for the libspring-java package. It is recommended to update to the latest version.
If immediate updates are not possible, implement the recommended workaround to restrict the use of forward and include dispatcher types until the update can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for libspring-java.
