Maven/org.gluu:oxauth-common CVE-2022-36663: critical 9.8
Gluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter
Action: Upgrade org.gluu:oxauth-common to 4.4.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.4.1 | - |
Fixed versions
| 4.4.1 |
Sources
- osv: GHSA-hc94-9v26-gxwv
- https://nvd.nist.gov/vuln/detail/CVE-2022-36663
- https://github.com/GluuFederation/oxAuth/commit/58c4ac9bbf2addf4b419bf155de99db57a202f5c
- https://github.com/GluuFederation/oxAuth
- https://github.com/GluuFederation/oxAuth/releases/tag/4.4.1
- https://gluu.org/gluu-4-4-1
CVE-2022-36663 · published · modified · JSON