CVE-2026-78885

CVE-2026-78885 affects liketrek TREK up to version 3.0.22 , specifically the findOrCreateUser function in server/src/services/oidcService.ts (OIDC Service component). The vulnerability is an improper authentication flaw that can be exploited remotely, though it requires a high level of attack com...

EUVD-2026-65473

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2017-7662

Apache CXF Fediz ships with an OpenId Connect OIDC service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF Cross Style Request Forgery style vulnerability has been found in this web application in Apache CXF Fediz...