Lucene search
+L

90 matches found

OSV
OSV
added 2024/02/11 3:15 a.m.37 views

UBUNTU-CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

6.1CVSS5.8AI score0.00414EPSS
Exploits0References2
CVE
CVE
added 2024/02/11 12:0 a.m.89 views

CVE-2024-25715

Summary: CVE-2024-25715 affects Glewlwyd SSO server 2.x up to 2.7.6, with an open redirection vulnerability exploitable via the redirect_uri parameter. The connected sources confirm the affected software and request a mitigation or patch, but do not provide a specific fixed version. The root caus...

6.1CVSS6.2AI score0.00414EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/11 12:0 a.m.12 views

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

6.8AI score0.00414EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/11 12:0 a.m.37 views

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

6.5AI score0.00414EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/11 12:0 a.m.8 views

Glewlwyd SSO server input validation error vulnerability

The Glewlwyd SSO server is a single sign-on SSO server for multi-factor authentication for OAuth2 and OpenID Connect authentication. An input validation error vulnerability exists in Glewlwyd SSO server versions 2.x through 2.7.6, which stems from an open redirection vulnerability in the componen...

6.1CVSS7AI score0.00414EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/02/11 12:0 a.m.25 views

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

6.1CVSS6.2AI score0.00414EPSS
Exploits0
OSV
OSV
added 2024/02/11 12:0 a.m.18 views

CVE-2024-25715

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirecturi...

6.1CVSS6.8AI score0.00414EPSS
Exploits0References4
Veracode
Veracode
added 2023/11/28 11:1 p.m.25 views

Buffer Overflow

glewlwyd:sid is vulnerable to Buffer overflow. The vulnerability due to improper authentication during FIDO2 credentials validation in webauthn registration through scheme/webauthn.c in Glewlwyd SSO server. It allow an attacker get access would leads to buffer overflow...

9.8CVSS7.2AI score0.00882EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2023/11/23 6:15 p.m.30 views

CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

9.8CVSS0.00882EPSS
Exploits0References2
OSV
OSV
added 2023/11/23 6:15 p.m.3 views

DEBIAN-CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

9.8CVSS9.6AI score0.00882EPSS
Exploits0References1
Prion
Prion
added 2023/11/23 6:15 p.m.21 views

Buffer overflow

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

7.5CVSS7.6AI score0.00882EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/23 6:15 p.m.41 views

CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

9.8CVSS7.2AI score0.00882EPSS
Exploits0References4
OSV
OSV
added 2023/11/23 6:15 p.m.30 views

UBUNTU-CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

9.8CVSS6.1AI score0.00882EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/11/23 12:0 a.m.32 views

CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

10AI score0.00882EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/11/23 12:0 a.m.3 views

CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

9.8AI score0.00882EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/23 12:0 a.m.6 views

Glewlwyd SSO server security vulnerability

Glewlwyd SSO server is a single sign-on SSO server for multi-factor authentication for OAuth2 and OpenID Connect authentication. A security vulnerability exists in Glewlwyd SSO server versions prior to 2.7.6 that stems from a buffer overflow vulnerability in the FIDO2 credential validation proces...

9.8CVSS7.4AI score0.00882EPSS
Exploits0References2
CVE
CVE
added 2023/11/23 12:0 a.m.52 views

CVE-2023-49208

Glewlwyd SSO server is reported affected by CVE-2023-49208: a possible buffer overflow in scheme/webauthn.c during FIDO2 credentials validation in webauthn registration. This concerns Glewlwyd before version 2.7.6. The root cause is a buffer overflow in the webauthn registration flow; the impact ...

9.8CVSS9.7AI score0.00882EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/11/23 12:0 a.m.28 views

CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

9.8CVSS7.4AI score0.00882EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2023/11/23 12:0 a.m.73 views

CVE-2023-49208

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration...

9.8CVSS9.8AI score0.00882EPSS
Exploits0
Openbugbounty
Openbugbounty
added 2023/08/21 8:44 a.m.10 views

glewlwyd.com Cross Site Scripting vulnerability OBB-3600534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Rows per page
Query Builder