This vulnerability in Spring Security Spring Authorization Server enables authentication bypass due to a primary weakness. It affects versions 7.0.0 to 7.0.4, 1.5.0 to 1.5.6, 1.4.0 to 1.4.9, and 1.3.0 to 1.3.10. The CVSS 3.1 base score is 9.6, indicating critical severity with network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change. Successful exploitation leads to high confidentiality and integrity impact without affecting availability. The vendor has not yet provided a patch or official remediation level.

Exploitation of this vulnerability allows an attacker with low privileges to bypass authentication controls, resulting in full compromise of confidentiality and integrity of the affected system. This could lead to unauthorized access to sensitive data and potential manipulation of system behavior. Availability is not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations or workarounds are provided at this time.