CVE-2022-31692

CVE-2022-31692 is a critical authorization bypass vulnerability in Spring Security versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9, affecting applications like NetApp Active IQ Unified Manager and VMware Spring Security. This flaw allows an attacker to bypass security rules by forwarding or including requests to higher-privilege endpoints when specific Spring Security configurations are in place for dispatcher types. With a CVSS score of 9.8 (CRITICAL), it presents a high risk of complete compromise (confidentiality, integrity, and availability) without user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.