Tag

cwe-639

Safeguard articles tagged "cwe-639" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Management

CVE-2022-31692: how a forward dispatch bypassed Spring Security authorization

A CVSS 9.8 flaw let a single internal forward skip Spring Security's URL-based access checks entirely — here's the root cause and the exact config fix.

Jul 15, 20266 min read