Lucene search
+L

1 matches found

OSV
OSV
added 2023/12/19 11:12 p.m.21 views

GHSA-9WGG-M99Q-HHFC Expired tokens can be renewed without validating the account password

Impact In versions of the proxy from 2022-09-05 onwards since 8c874c2ff3d503ac20c7d32f46e08547fcb9e23f, expired OAuth 2.0 client credentials grant CCG flow authorisation tokens could be renewed automatically without checking their validity against the original account configuration i.e., the...

8.1CVSS7.8AI score
SaveExploits0References5
Rows per page
Query Builder