Cross-site Scripting (XSS)

Spring Authorization Server is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to user-controlled values being rendered without HTML entity encoding in the default consent page, which allows an attacker to inject malicious content through a crafted OAuth2 authorization request an...