Vulnerabilities in Spring Security