Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add spring CVE-2022-22965,CVE-2022-22978 #117

Merged
merged 3 commits into from
Sep 25, 2023
Merged

add spring CVE-2022-22965,CVE-2022-22978 #117

merged 3 commits into from
Sep 25, 2023

Conversation

QdghJ
Copy link
Contributor

@QdghJ QdghJ commented Sep 21, 2023

PortSwiggerWiener
PortSwiggerWiener reviewed Sep 21, 2023
View reviewed changes
Copy link
Collaborator

@PortSwiggerWiener PortSwiggerWiener left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Many thanks for the submission and the interesting BChecks!

vulnerabilities-CVEd/CVE-2022-22978-spring_security_auth_bypass.bcheck Outdated Show resolved Hide resolved
vulnerabilities-CVEd/CVE-2022-22978-spring_security_auth_bypass.bcheck Outdated Show resolved Hide resolved
vulnerabilities-CVEd/CVE-2022-22965-spring_data_binding_rce.bcheck Show resolved Hide resolved
vulnerabilities-CVEd/CVE-2022-22978-spring_security_auth_bypass.bcheck Outdated Show resolved Hide resolved
@QdghJ
Update CVE-2022-22965-spring_data_binding_rce.bcheck
f26fd37 
Add additional verification checks
@QdghJ
Update CVE-2022-22978-spring_security_auth_bypass.bcheck
3166141 
Detect the response code before sending the request
Michelle-PortSwigger
Michelle-PortSwigger approved these changes Sep 25, 2023
View reviewed changes
Copy link
Contributor

@Michelle-PortSwigger Michelle-PortSwigger left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Improvements look good

PortSwiggerWiener
PortSwiggerWiener approved these changes Sep 25, 2023
View reviewed changes
Copy link
Collaborator

@PortSwiggerWiener PortSwiggerWiener left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Many thanks for your patience and incorporating the review suggestions. 👍

@PortSwiggerWiener PortSwiggerWiener merged commit e2b34b3 into PortSwigger:main Sep 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@PortSwiggerWiener PortSwiggerWiener PortSwiggerWiener approved these changes

@Michelle-PortSwigger Michelle-PortSwigger Michelle-PortSwigger approved these changes

Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@QdghJ @Michelle-PortSwigger @PortSwiggerWiener