1 matches found
GHSA-9WGG-M99Q-HHFC Expired tokens can be renewed without validating the account password
Impact In versions of the proxy from 2022-09-05 onwards since 8c874c2ff3d503ac20c7d32f46e08547fcb9e23f, expired OAuth 2.0 client credentials grant CCG flow authorisation tokens could be renewed automatically without checking their validity against the original account configuration i.e., the...
8.1CVSS7.8AI score
SaveExploits0References5
20