This vulnerability in Spring Security affects versions 7.0.0 through 7.0.4. When an application configures servlet paths using <sec:intercept-url> with a servlet-path attribute, the servlet path is omitted from the path matcher calculation. As a result, authorization rules tied to these paths are not enforced, potentially allowing attackers to bypass authorization controls. The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no vendor advisory or patch link available at this time, and the vulnerability is not related to a cloud service.

The vulnerability enables an authorization bypass in affected Spring Security versions, which can allow unauthorized users to perform actions or access resources that should be protected by authorization rules. The integrity of the application is at risk, but confidentiality and availability are not impacted according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and avoid using the <sec:intercept-url> configuration with the servlet-path attribute as described, or implement additional authorization checks outside of this mechanism to mitigate the risk.