Hey everyone! I am analyzing the security of a legacy project in Grails 2.5 that uses Spring Security, and a question arose about using the

RequestRegexMatcher

class. Does anyone know if Spring Security in Grails 2.5 uses this class implicitly to handle requests, or if it is only used if we add it explicitly at some point in the code? This question is important to evaluate possible impacts and mitigations related to vulnerabilities: CVE-2022-22978 (Spring Security Regular Expression Authorization Bypass) CWE-285 (Improper Authorization) CWE-863 (Incorrect Authorization) If anyone has already dealt with this issue or has fix recommendations for Grails 2.5, any insight would be greatly appreciated. Thanks!