CVE-2021-26715
1 advisory.
Maven/org.mitre:openid-connect-server CVE-2021-26715: critical 9.1
Server Side Request Forgery (SSRF) in org.mitre:openid-connect-server
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-792r-mh2q-p8qp
- https://nvd.nist.gov/vuln/detail/CVE-2021-26715
- https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/releases
- https://portswigger.net/research/hidden-oauth-attack-vectors
CVE-2021-26715 · published · modified · JSON