What’s Vulnerable › Vulnerabilities

CVE-2018-15801: Authorization Bypass During JWT Issuer Validation with spring-security

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-19 · updated 2026-06-17
• Weakness: CWE-345

Description

Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malicious user must be used when signing JWTs. In that case, a malicious user could fashion signed JWTs with the malicious issuer URL that may be granted for the honest issuer.

Affected products

• Spring Framework: from 5.1.0 before 5.1.2 — fixed in 5.1.2
• Spring Framework: from 5.1.x before 5.1.2 — fixed in 5.1.2

How to fix

Upgrade to a fixed version: Spring Framework 5.1.2; Spring Framework 5.1.2. Check the vendor advisory for mitigations.

References

• https://pivotal.io/security/cve-2018-15801
• https://pivotal.io/security/cve-2018-15801

Get alerted when CVE-2018-15801 or the next vulnerability affects your stack