VDB
GHSA-x873-6rgc-94jc
GHSA-x873-6rgc-94jc
PUBLISHED
CVSS 6.300000190734863 MEDIUM
Spring Security logout not clearing security context
Record from GitHub Advisory Database · Published April 19, 2023
spring-security-core is fixed in 6.0.3, 5.8.3 and 5.7.8 (Maven Central)
Spring Security logout not clearing security context
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| org.springframework.security:spring-security-core | Maven Central | 6.0.3, 5.8.3, 5.7.8 |
Risk scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Maven | org.springframework.security:spring-security-core | 5.7.0, 5.8.0, 6.0.0 |
Timeline
- Apr 19, 2023 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-x873-6rgc-94jc
vulnetix vdb fixes GHSA-x873-6rgc-94jcOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-x873-6rgc-94jc/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart