TZCERT-SU-24-0308 (Spring Security Update)

Spring has released security updates to address vulnerabilities in Spring Security and Spring Authorization Server. Exploitation of these vulnerabilities may allow an attacker to bypass authentication.

Users and administrators are encouraged to review Spring Security Advisories cve-2024-22257 and cve-2024-22258 and apply necessary updates.