Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.
Affected versions:
Spring Framework 5.3.0 through 5.3.48.
Security-related modifications applied to a ServerRequest by a filter in the WebFlux Kotlin Router DSL are silently discarded, causing security enrichment to have no effect and allowing security bypass.
CAPEC ID: N/A
Description: Security-related modifications applied to a ServerRequest by a filter in the WebFlux Kotlin Router DSL are silently discarded, causing security enrichment to have no effect and allowing security bypass.