CVE-2021-27582

creationtimestamp| type| source ---|---|--- 2021-02-23 20:35:17+00:00| seen| https://t.me/cibsecurity/24001 2021-03-25 07:21:24+00:00| published-proof-of-concept| https://t.me/ptswarm/15...

CVE-2021-27582

MITREid Connect OpenID Connect server (MITREid Connect) before 1.3.3 is affected by a Mass Assignment (Autobinding) vulnerability in OAuthConfirmationController.java. The issue arises from unsafe usage of the @ModelAttribute annotation during the OAuth authorization flow, allowing HTTP request pa...