Description
In Spring Security versions 5.5.6 and 5.6.3 and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.
References
https://security.netapp.com/advisory/ntap-20220707-0003/
https://tanzu.vmware.com/security/cve-2022-22978
https://www.oracle.com/security-alerts/cpujul2022.html