Security Patch: Vulnerability introduced by org.springframework.security:spring-security-config@6.1.3

[petruki]

Describe the patch
Incorrect Permission Assignment for Critical Resource

Introduced through: com.github.switcherac:switcher-ac@1.0.8-SNAPSHOT › org.springframework.boot:spring-boot-starter-security@3.1.3 › org.springframework.security:spring-security-config@6.1.3

Current dependency

• Name: org.springframework.boot:spring-boot-starter-security@3.1.3

Optional - Remediation

• Name: org.springframework.boot:spring-boot-starter-security@3.1.4

Additional context
https://www.cve.org/CVERecord?id=CVE-2023-34042
https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-5905484