PT-2024-17546 · Red Hat · Jboss Eap

Name of the Vulnerable Software and Affected Versions: JBoss EAP affected versions not specified Description: A flaw was found in JwtValidator.resolvePublicKey in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior i...