146 matches found
CVE-2023-25581
This Python script demonstrates the exploitation of the CVE-2023-25581 vulnerability in pac4j-core. The vulnerability allows an attacker to execute arbitrary code RCE by deserializing maliciously crafted Base64-encoded data. Prerequisites Before running the script, make sure you have the followin...
Open Redirect
pac4j-core is vulnerable to open redirect. The vulnerability is due to DefaultLogoutLogic.perform accepting backslash-prefixed logout redirect targets matching logoutUrlPattern, where attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
Incorrect Authorization
Overview org.pac4j:pac4j-core is a pac4j is an easy and powerful security engine for Java to authenticate users, get their profiles and manage authorizations in order to secure web applications and web services. Affected versions of this package are vulnerable to Incorrect Authorization in the...
Open Redirect
Overview org.pac4j:pac4j-core is a pac4j is an easy and powerful security engine for Java to authenticate users, get their profiles and manage authorizations in order to secure web applications and web services. Affected versions of this package are vulnerable to Open Redirect in the perform...
CVE-2026-82463
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...
CVE-2026-82464
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
CVE-2026-82464
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
EUVD-2026-68121
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
CVE-2026-82464 pac4j-core before 6.5.6 Open Redirect via Backslash Logout
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
CVE-2026-82464 pac4j-core before 6.5.6 Open Redirect via Backslash Logout
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
CVE-2026-82464
pac4j-core versions before 6.5.6 are affected by an open redirect vulnerability in the DefaultLogoutLogic.perform() method. The component accepts backslash-prefixed logout redirect targets that match the configured logoutUrlPattern. Because browsers normalize a backslash into a network-path refer...
CVE-2026-82464 pac4j-core before 6.5.6 Open Redirect via Backslash Logout
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...
EUVD-2026-68120
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...
CVE-2026-82463 pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...
CVE-2026-82463 pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...
CVE-2026-82463 pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...
CVE-2026-82463
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...
CVE-2026-82463
pac4j-core (a Java-based authentication and authorization library) versions prior to 6.5.6 are affected by an authentication bypass in CheckProfileTypeAuthorizer . The root cause is reversed profile type validation logic , which allows an attacker authenticated via a weaker client (e.g., generic ...
CVE-2026-82463: Incorrect Authorization
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...
CVE-2026-82464: URL Redirection to Untrusted Site
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path...