CVE-2021-32701
2 advisories.
Go/github.com/ory/oathkeeper CVE-2021-32701: high 7.5
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled
Action: Upgrade github.com/ory/oathkeeper to 0.38.12-beta.1 or later.
go get github.com/ory/oathkeeper@v0.38.12-beta.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.38.0-beta.2 | 0.38.12-beta.1 | - |
Fixed versions
| 0.38.12-beta.1 |
Sources
CVE-2021-32701 · published · modified · JSON
Go/github.com/ory/oathkeeper CVE-2021-32701: high 7.5
Incorrect Authorization in ORY Oathkeeper
Action: Upgrade github.com/ory/oathkeeper to 0.38.12-beta.1 or later.
go get github.com/ory/oathkeeper@v0.38.12-beta.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.38.0-beta.2 | 0.38.12-beta.1 | - |
Fixed versions
| 0.38.12-beta.1 |
Sources
- osv: GHSA-vfvf-6gx5-mqv6
- https://github.com/ory/oathkeeper/security/advisories/GHSA-qvp4-rpmr-xwrr
- https://nvd.nist.gov/vuln/detail/CVE-2021-32701
- https://github.com/ory/oathkeeper/pull/424
- https://github.com/ory/oathkeeper/commit/1f9f625c1a49e134ae2299ee95b8cf158feec932
CVE-2021-32701 · published · modified · JSON