Authentication Bypass

league/oauth2-server is vulnerable to authentication bypass. The vulnerability exists in the LogicException parameter of CryptKey.php when the key is passed as a string due to key exposure in the exception message, which allows an attacker to bypass authentication mechanisms and access sensitive...