PatchTheCVEmy-springsecurity-plus vulnerabilities and fixes
Recent CVEs affecting my-springsecurity-plus, with upgrade or downgrade steps. 8 tracked.
Also searched as: my springsecurity plus.
my-springsecurity-plus has 8 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 8. Most recent: 2024-07-12. Highest priority: CVE-2024-40539 (score 55/100).
- CVE-2024-6681 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-0
- CVE-2024-6680 MEDIUM 6.3 UPGRADE A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04
- CVE-2024-6679 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04
- CVE-2024-6676 MEDIUM 6.3 UPGRADE A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as critical
- CVE-2024-40542 CRITICAL 9.8 UPGRADE my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the data
- CVE-2024-40541 CRITICAL 9.8 UPGRADE my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the data
- CVE-2024-40540 CRITICAL 9.8 UPGRADE my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the data
- CVE-2024-40539 CRITICAL 9.8 UPGRADE my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the data
FAQ
How do I fix my-springsecurity-plus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is my-springsecurity-plus being exploited right now?
None of the tracked my-springsecurity-plus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which my-springsecurity-plus CVE should I patch first?
CVE-2024-40539 currently ranks highest (55/100): my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the data.