CVE-2024-22234 · Brief

CVEs like CVE-2024-22234

The records whose text reads closest to CVE-2024-22234, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2024-222570.779
   In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions…

   Related weakness classes, CWE-284 is above CWE-862; same vendor or product family, Spring.

2. CVE-2026-227460.632
   User Attribute Enumeration when Using DaoAuthenticationProvider

   Same vendor or product family, Spring.

3. CVE-2019-131880.615
   In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application.

   Related weakness classes, CWE-284 is above CWE-287.

4. CVE-2024-554020.616
   4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.

   Same weakness class, CWE-284 (access control failure).

5. CVE-2025-222230.639
   Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods.

   Same vendor or product family, Spring.

6. CVE-2024-416000.642
   Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain…

   Same weakness class, CWE-284 (access control failure).

7. CVE-2025-709830.639
   Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to…

   Same weakness class, CWE-284 (access control failure).

8. CVE-2024-534940.686
   Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive…

   Same weakness class, CWE-284 (access control failure).

9. CVE-2021-220470.628
   In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented…

   Same vendor or product family, Spring.

10. CVE-2026-227540.623
    ervlet Path Not Correctly Included in Path Matching of XML Authorization Rules

    Same weakness class, CWE-284 (access control failure); same vendor or product family, Spring.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.