CVE-2023-6267
HIGH
MEDIUM
Priority: 0.06
BB Relevance:
77/100
Published: 2024-01-25
Modified: 2026-11-04
First seen: 2026-11-04
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
Low
I:
Low
A:
High
Description
A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed (deserialized) prior to the security constraints being evaluated and applied. This does not happen with configuration based security.
Weakness Classification (1)
Affected Software (3)
References & Advisories (4)
Vendor Advisory
Issue Tracking
Vendor Advisory