Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/09/02 5:28 p.m.•41 views

CVE-2026-55221 Boruta: OAuth credentials exposed in Boruta business logs

Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, Boruta logged sensitive OAuth and OpenID Connect values in business event logs. Logged values could include access tokens, refresh...

6.5CVSS0.00482EPSS
SaveExploits0References3
Rows per page
Query Builder