CyberRota Analysis
AI-GeneratedThe vulnerability affects Spring Security's OAuth2 Authorization Server module versions 7.0.0 to 7.0.4, specifically when Dynamic Client Registration is enabled. Insufficient validation of client metadata allows an attacker with a valid Initial Access Token to register a malicious client, potentially leading to Stored Cross-Site Scripting (XSS), Privilege Escalation, or Server-Side Request Forgery (SSRF). Organizations using these versions of Spring Security should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possesses a valid Initial Access Token can register a malicious client with crafted metadata, which, depending on server configuration and how the metadata is later rendered or used, may result in Stored Cross-Site Scripting (XSS), Privilege Escalation, or Server-Side Request Forgery (SSRF).
Related CVEs
Other vulnerabilities affecting the same vendor(s)