CVE-2021-3523

3scale APICast (Red Hat 3scale) is affected in versions prior to 2.11.0. The root cause is incorrect reuse of connections, enabling an attacker to bypass API security restrictions when hosting multiple APIs on the same IP. CVSS v3.1 base score is 7.5 (HIGH); exploitation details are not provided....

CVE-2023-0456

CVE-2023-0456 affects Red Hat APICast, specifically 3Scale’s OIDC module. The flaw arises when the OIDC module does not properly evaluate a mismatched token from a separate realm, potentially allowing access to information that should be unauthorized. Documents describe this as an information dis...