When thinking about application security, authentication and authorization are usually at the forefront, but can that keep your application safe? While both authentication and authorization are important steps to securing your application, there are many other considerations when it comes to overall security. This talk will focus on application vulnerabilities, by demonstrating an attack that may occur and how to protect against the attack by leveraging Spring Security.