5288 matches found
CVE-2025-27371
In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 910...
Malicious code in meli-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1887 Malicious code in meli-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1842 Malicious code in iberia-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in iberia-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1816 Malicious code in godaddy-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in apple-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1733 Malicious code in apple-oauth (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-27371
In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 910...
CVE-2025-27371
Technical details for CVE-2025-27371 are not publicly available in the provided documents. The materials do not specify affected products, versions, impact, or remediation. Monitor for updates.
CVE-2025-27371
In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 910...
OpenID IETF OAuth 安全漏洞
OpenID IETF OAuth is an authorization framework from the OpenID Foundation. A security vulnerability exists in OpenID IETF OAuth version 2.0, which stems from an ambiguous audience value...
BIT-ODOO-2024-12368
Improper access control in the authoauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users...
CVE-2025-1801
A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a greater privileged user, enabling the...
CVE-2025-23046
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth...
CVE-2024-12368
Improper access control in the authoauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users...
Incorrect Implementation of Authentication Algorithm
Overview glpi/glpi is a free Asset and IT Management Software package with ITIL Service Desk, licenses tracking and software auditing. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm due to improper validation in the OauthIMAP plugin. If a...
CVE-2025-23046
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, anyone can connect to GLPI using a user name on which an Oauth...