CVE Catalog
CVE-2023-34034
CriticalCVSS 9.1Exploitation Probability (EPSS)
High risk3.47%
88th percentile - higher than 88% of all known CVEs
Summary
Using '**' as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, leading to potential security bypass.
Risk Assessment
The organization may be exposed to attacks that exploit this mismatch, potentially allowing unauthorized access to resources.
Recommendation
It is recommended to avoid using the '**' pattern in Spring Security configuration for WebFlux and to review and update security configurations.
Original NVD description (English source)
Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.