Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2023-20873

Description

In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry could be susceptible to a security bypass. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.6+. 2.7.x users should upgrade to 2.7.11+. Users of older, unsupported versions should upgrade to 3.0.6+ or 2.7.11+.

POC

Reference

No PoCs from references.

Github

- https://github.com/fkie-cad/nvd-json-data-feeds

- https://github.com/hinat0y/Dataset1

- https://github.com/hinat0y/Dataset10

- https://github.com/hinat0y/Dataset11

- https://github.com/hinat0y/Dataset12

- https://github.com/hinat0y/Dataset2

- https://github.com/hinat0y/Dataset3

- https://github.com/hinat0y/Dataset4

- https://github.com/hinat0y/Dataset5

- https://github.com/hinat0y/Dataset6

- https://github.com/hinat0y/Dataset7

- https://github.com/hinat0y/Dataset8

- https://github.com/hinat0y/Dataset9

- https://github.com/scordero1234/java_sec_demo-main

- https://github.com/seal-community/patches

- https://github.com/tmyymmt/docker-ansible-apache-tomcat-spring_boot