CVE-2020-7692
1 advisory.
Maven/com.google.oauth-client:google-oauth-client CVE-2020-7692: high 7.4, EPSS 1.52%
Improper Authorization in Google OAuth Client
Action: Upgrade com.google.oauth-client:google-oauth-client to 1.31.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.31.0 | - |
Fixed versions
| 1.31.0 |
Sources
- osv: GHSA-f263-c949-w85g
- https://nvd.nist.gov/vuln/detail/CVE-2020-7692
- https://github.com/googleapis/google-oauth-java-client/issues/469
- https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824
- https://github.com/googleapis/google-oauth-java-client
- https://lists.apache.org/thread.html/r3db6ac73e0558d64f0b664f2fa4ef0a865e57c5de20f8321d3b48678@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/reae8909b264d1103f321b9ce1623c10c1ddc77dba9790247f2c0c90f@%3Ccommits.druid.apache.org%3E
- https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276
- https://tools.ietf.org/html/rfc7636%23section-1
- https://tools.ietf.org/html/rfc8252%23section-8.1
CVE-2020-7692 · published · modified · JSON