PT-2024-17546

Name of the Vulnerable Software and Affected Versions JBoss EAP affected versions not specified Description A flaw was found in JwtValidator.resolvePublicKey in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior is...