Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09804
HistoryJan 07, 2022 - 12:00 a.m.

Pac4j data forgery problem vulnerability

2022-01-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.002 Low

EPSS

Percentile

53.0%

Pac4j is a simple yet powerful Java security engine. Used to authenticate users, obtain their profiles and manage authorization to protect Web applications and Web services.Pac4j has a data forgery problem vulnerability that stems from the product not using a valid algorithm when validating ID tokens, which can be exploited by attackers to bypass token authentication.

CPENameOperatorVersion
Pac4j Pac4jle5.1

0.002 Low

EPSS

Percentile

53.0%