Lucene search
+L

6 matches found

NVD
NVD
added 2026/08/25 1:19 p.m.8 views

CVE-2026-78885

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

6.3CVSS0.0036EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/25 12:15 p.m.29 views

CVE-2026-78885 liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

6.3CVSS0.0036EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/25 12:15 p.m.16 views

CVE-2026-78885

CVE-2026-78885 affects liketrek TREK up to version 3.0.22 , specifically the findOrCreateUser function in server/src/services/oidcService.ts (OIDC Service component). The vulnerability is an improper authentication flaw that can be exploited remotely, though it requires a high level of attack com...

6.3CVSS5.5AI score0.0036EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/25 12:15 p.m.7 views

EUVD-2026-65473

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

6.3CVSS4.9AI score0.0036EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/25 12:15 p.m.5 views

CVE-2026-78885 liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication

A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

6.3CVSS5.1AI score
SaveExploits0References8
NVD
NVD
added 2017/05/16 5:29 p.m.27 views

CVE-2017-7662

Apache CXF Fediz ships with an OpenId Connect OIDC service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF Cross Style Request Forgery style vulnerability has been found in this web application in Apache CXF Fediz...

8.8CVSS8.6AI score0.01218EPSS
SaveExploits0References8
Rows per page
Query Builder