CVE-2022-41923

CVE-2022-41923 is a critical privilege escalation vulnerability affecting the Grails Spring Security Core plugin versions 1.x, 2.x, >=3.0.0 <3.3.2, >=4.0.0 <4.0.5, and >=5.0.0 <5.1.1. This flaw allows an unauthenticated attacker to bypass authorization by exploiting a mismatch in endpoint access requirements, potentially gaining full control over the application. With a CVSS score of 9.8 (Critical), it presents a high risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion, indicating awareness within the cybersecurity community.