Description
VMware Spring Security是美国威睿（VMware）公司的一套为基于Spring的应用程序提供说明性安全保护的安全框架。 VMware Spring Security 6.1.7之前的版本 6.1.x版本和6.2.2之前的6.2.x版本存在安全漏洞，该漏洞源于容易受到损坏的访问控制影响。
VMware Spring Security 权限绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhuanlan.zhihu.com/p/575575323
https://www.secrss.com/articles/42765
https://avd.aliyun.com/detail?id=AVD-2023-34034
https://www.huaweicloud.com/notice/2021/20220525183347168.html
https://zone.ci/vulns/ys/339173.html
https://l3yx.github.io/2022/07/16/Spring-Security-%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87-CVE-2022-22978/
https://nosec.org/m/share/5006.html
https://www.anquanke.com/post/id/279670
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/VMware-Spring-Security-%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E-CVE-2022-22978.md
https://spring.io/security/cve-2025-22223
https://www.sentinelone.com/vulnerability-database/cve-2022-31692/
https://www.heise.de/en/news/Spring-Security-Critical-vulnerability-enables-authorization-bypass-9996613.html