Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2025/09/08 8:46 p.m.26 views

Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

Summary The OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate their privileges to owner-level. Details When creating or updating OAuth...

8.6CVSS7.2AI score0.00392EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder