VYPR

OAuth Identity

by Cryptpad

CVEs (1)

  • CVE-2023-45144CriOct 16, 2023
    risk 0.58cvss 10.0epss 0.01

    com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user logs in via the OAuth method, the identityOAuth parameters sent in the GET request is vulnerable to cross site scripting (XSS) and…