Critical VMware Tanzu Spring flaws expose administrator access and isolated data

VMware Tanzu Spring software is facing a broad wave of security fixes, including a critical LDAP flaw that can grant administrator access and let attackers alter user identities. Additional weaknesses affect Spring Security, Spring AI, and Spring GraphQL, while CERT-Bund has separately reported multiple Spring Framework denial-of-service flaws rated CVSS 6.5; no exploitation has been confirmed so far. Source

Läs hela artikeln hos källan.