Spring Security Authorization Server’s default consent page renders user-controlled values without HTML entity encoding.
Spring Security 7.1.0
Spring Security 7.0.0 – 7.0.6
2026年9月4日
CVE-2026-47877 [HIGH] – Spring Security Authorization Server’s default consent page renders user-controlled values
📑 文章目录
