webflux

CVE-2023-34034 Explained: The Spring Security WebFlux Authorization Bypass

CVE-2023-34034 lets attackers slip past Spring Security rules in WebFlux apps because of a wildcard-matching mismatch. Here is exactly what breaks, who is affected, and how to fix it.