Advisories · Technology
cyberlord92 OAuth Single Sign On – SSO (OAuth Client).
Every CVE that names cyberlord92 OAuth Single Sign On – SSO (OAuth Client) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization
- cyberlord92 OAuth Single Sign On – SSO (OAuth Client)
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
- cyberlord92 OAuth Single Sign On – SSO (OAuth Client)
- Weak cryptography or TLS
- CVSS 4.3 Medium
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery
- cyberlord92 OAuth Single Sign On – SSO (OAuth Client)
- Cross-site request forgery (CSRF)
- CVSS 8.1 High
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass
- cyberlord92 OAuth Single Sign On – SSO (OAuth Client)
- Authentication bypass