CVE-2023-27490

NextAuth.js is an open source authentication solution for Next.js applications. next-auth applications using OAuth provider versions before v4.20.1 have been found to be subject to an authentication v ...

Continue Reading
CVE-2023-33005

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on...Read More ...

Continue Reading
CVE-2023-33005

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on...Read More ...

Continue Reading
CVE-2023-34224

In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was...Read More ...

Continue Reading
CVE-2023-37260

league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP. Starting in version 8.3.2 and prior to version 8.5.3, servers that passed their keys to the CryptKey cons ...

Continue Reading
CVE-2023-34224

In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was...Read More ...

Continue Reading
CVE-2023-34246

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been pr ...

Continue Reading
CVE-2023-30527

Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jen ...

Continue Reading

Back to Main

Subscribe for the latest news: