Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/12/09 8:53 p.m.34 views

CVE-2024-12369 Elytron-oidc-client: oidc authorization code injection

A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with t...

4.2CVSS0.00248EPSS
SaveExploits0References9
Rows per page
Query Builder