In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to au ...
Continue ReadingMarch 03, 2025
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other...Read More ...
Continue ReadingMarch 02, 2025
No description is available for this CVE. Mitigation Below are the mitigation steps to avoid the flaw from happening, still it is indicated to update the product after the fix is available. 1) set G ...
Continue ReadingMarch 01, 2025
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an O ...
Continue ReadingMarch 01, 2025
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other...Read More ...
Continue ReadingFebruary 27, 2025
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an O ...
Continue ReadingFebruary 27, 2025
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "Mail servers" authentication provider is configured to use an O ...
Continue ReadingFebruary 27, 2025
Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other...Read More ...
Continue ReadingFebruary 27, 2025
Back to Main