OAuth - API Security Blog

CVE-2022-0916

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization opera ...

13 июня, 2022

RST Threat feed. IOC: https://ws.alleqro.pl.priyadarshi.net/upload-data/form/auth.htm?authorization-allegro-pl/auth/oauth/authorize?client_id=tb5sff3c…

Found **https://ws[.]alleqro.pl.priyadarshi.net/upload-data/form...Read More ...

12 июня, 2022

RST Threat feed. IOC: https://quintakailua.com/oauth/indexx.php

Found **https://quintakailua[.]com/oauth/indexx.php** ...Read More ...

11 июня, 2022

RST Threat feed. IOC: https://quintakailua.com/oauth/indexx.php?oauth=eca6c-xech0-el5k21654785017582648ff8fb01b9b9d2cdea1888de946582648ff8fb01b9b9d2cde…

Found **https://quintakailua[.]com/oauth/indexx.php?oauth=eca6c-x...Read More ...

10 июня, 2022

Improper Verification of Cryptographic Signature in google-oauth-java-client

### Summary The vulnerability impacts only users of the IdTokenVerifier class. The verify method in IdTokenVerifier does not validate the signature before verifying the claims (e.g., iss, aud, etc.). ...

09 июня, 2022

Improper Verification of Cryptographic Signature in google-oauth-java-client

### Summary The vulnerability impacts only users of the IdTokenVerifier class. The verify method in IdTokenVerifier does not validate the signature before verifying the claims (e.g., iss, aud, etc.). ...

09 июня, 2022

RST Threat feed. IOC: https://roommejts.com/oppel/oppel/indexx.php?oauth=9z87p-o47pg-tmkwh16547179458b3e276575fc48927c9b98ec924c1d888b3e276575fc48927c…

Found **https://roommejts[.]com/oppel/oppel/indexx.php?oauth=9z8...Read More ...

09 июня, 2022

This Week in Spring – April 26th, 2022

Hi, Spring fans! Welcome to another installment of _This Week in Spring_! This week I was _hoping_ to be in glorious Chicago, Illinois for the first in-person SpringOne Tour installment since the pand ...

09 июня, 2022