CVE-2024-22477 PingFederate OIDC Policy Management Editor Cross-Site Scripting

A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only...

CVE-2024-22477

PingFederate OIDC Policy Management Editor in the admin console has a cross-site scripting vulnerability affecting admin console users. The issue is described across multiple sources (CVE-2024-22477) with no publicly documented exploit details in the provided materials. Impact is limited to admin...

CVE-2024-22477 PingFederate OIDC Policy Management Editor Cross-Site Scripting

A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only...

CVE-2024-22477: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only...

OPENSUSE-SU-2024:10714-1 dex-oidc-2.28.1-1.3 on GA media

These are all security issues fixed in the dex-oidc-2.28.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12410-1 dex-oidc-2.35.3-1.1 on GA media

These are all security issues fixed in the dex-oidc-2.35.3-1.1 package on the GA media of openSUSE Tumbleweed...

Open Redirect

github.com/goharbor/harbor is vulnerable to open redirect. The vulnerability is due to a lack of validation for the redirecturl parameter with the OIDC authentication, which allows attackers to redirect users to malicious sites after login...

IBM Security Verify Access Input Validation Error Vulnerability (CNVD-2024-26083)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

Open Redirect URL in Harbor

Description Under OIDC authentication mode, there is a redirecturl parameter exposed in the URL which is used to redirect the current user to the defined location after the successful OIDC login, This redirecturl can be an ambiguous URL and can be used to embed a phishing URL. For example: if a...

GHSA-5757-V49G-F6R7 Open Redirect URL in Harbor

Description Under OIDC authentication mode, there is a redirecturl parameter exposed in the URL which is used to redirect the current user to the defined location after the successful OIDC login, This redirecturl can be an ambiguous URL and can be used to embed a phishing URL. For example: if a...

CVE-2024-22338

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978...

CVE-2024-22338

IBM Security Verify Access OIDC Provider versions 22.09–23.03 are affected by an input validation vulnerability (hazardous input validation) that could disclose sensitive information to a local user. The issue is specific to the OIDC Provider component and enables information disclosure under loc...

CVE-2024-22338 IBM Security Verify Access OIDC Provider information disclosure

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978...

CVE-2024-22338 IBM Security Verify Access OIDC Provider information disclosure

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978...

IBM Security Verify Access 输入验证错误漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

PT-2024-19348 · Ibm · Ibm Security Verify Access Oidc Provider

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access OIDC Provider versions 22.09 through 23.03 Description: The issue is related to hazardous input validation, which could disclose sensitive information to a local user. Recommendations: For versions 22.09 through...

CVE-2024-22338: Improper Input Validation

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978...

Tools for Humanity: [Meetup][World ID][OIDC] Insufficient Filtering of "state" Parameter in Response Mode form_post leads to XSS and ATO

A lack of proper validation in the state parameter of the World ID OIDC authentication logic allowed the injection of HTML characters into the response body when using formpost as the OIDC response mode. This vulnerability was mitigated by the Content Security Policy CSP...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: lazygit, conftest-fips, atlantis, local-static-provisioner, mc, rabbitmq-default-user-credential-updater, delve, prometheus-stackdriver-exporter, prometheus-mongodb-exporter-fips, opa, grpcurl, crossplane-provider-azure, prometheus-redis-exporter-fips, kube-bench, k9...

Cross-Site Request Forgery (CSRF)

org.keycloak, keycloak-services is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to inadequate validation of cross-origin messages in Keycloak's OIDC component's "checkLoginIframe," allowing attackers to exploit Cross-Site Request Forgery CSRF attacks...