CVE-2024-22257 — Spring Security authorization bypass

A broken-authorization bug in Spring Security's AuthenticatedVoter let unauthenticated requests pass through specific pre-authorization rules under JSR-250 annotations.