CVE-2024-22257 @ Maven-org.springframework.security:spring-security-core-3.2.4.RELEASE

[cxronen]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2024-22257
Checkmarx Project: cxronen/BookStore_VSCode
Repository URL: https://github.com/cxronen/BookStore_VSCode
Branch: master
Scan ID: 3aaa12b3-552a-4874-ba98-3d364d7d56f6

---

In Spring Security versions through 5.7.11, 5.8.0-M1 through 5.8.10, 6.0.0-M1 through 6.0.8, 6.1.0-M1 through 6.1.7, 6.2.0-M1 through 6.2.2, and 6.3.0-M1 through 6.3.0-M2, an application is possibly vulnerable to
broken access control when it directly uses the "AuthenticatedVoter#vote" passing a "null" Authentication parameter.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: HIGH
Availability impact: NONE
Remediation Upgrade Recommendation: 5.7.12