Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2024/09/11 3:31 p.m.•105 views

GHSA-8259-2X72-2GVC Eclipse Dataspace Components's ConsumerPullTransferTokenValidationApiController doesn't check for token validit

In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity expiry, not-before, issuance date, which can allow an attacker to bypass the check for token expiration. The issue requires to have ...

7.3CVSS7.2AI score0.00407EPSS
SaveExploits0References7
Rows per page
Query Builder