Code Injection

🗓️ 04 May 2021 04:19:25Reported by AnonymousType

nodejs

nodejs🔗 www.npmjs.com👁 46 Views

Code Injection in oauth2-server without PKCE implementatio

Reporter	Title	Published	Views	Family All 61
IBM Security Bulletins	Security Bulletin: There is a vulnerability in google-oauth-client-1.25.0.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2020-7692 and CVE-2021-22573)	15 Jan 202417:26	–	ibm
IBM Security Bulletins	Security Bulletin: a security update of the google oauth client library to version 1.31.0 for CVE-2020-7692.	19 Nov 202001:47	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in google-oauth-client-1.25.0.jar used by IBM Maximo Asset Management application (CVE-2020-7692 and CVE-2021-22573)	15 Jan 202417:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.7.	9 Apr 202514:41	–	ibm
IBM Security Bulletins	Security Bulletin: Upgrade javaenv:2.2 to address Gradle oauth authentication concerns.	3 Dec 202016:01	–	ibm
IBM Security Bulletins	Security Bulletin: Google-api-client as used by IBM QRadar SIEM is vulnerable to authorization bypass (CVE-2020-7692)	4 Mar 202122:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Google OAuth Client Library affects watsonx.data	5 Sep 202418:07	–	ibm
Circl	CVE-2020-7692	4 Oct 202012:46	–	circl
CNVD	Google APIs google-oauth-java-client security bypass vulnerability	12 Jul 202000:00	–	cnvd
CVE	CVE-2017-18924	4 Oct 202004:38	–	cve

Vulners

Node

oauth2-serverRange0.0.0≥

04 May 2021 18:22Current

3Low risk

Vulners AI Score3

EPSS0.00202

oauth2-server oauth 2.0 pkce authorization code injection cve-2017-18924