Skip to content
OpenAdvisories

Archive

10 October 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2023-25581 Public exploit

    Deserialization of untrusted data in InternalAttributeHandler in pac4j

    pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the `UserProfile` class from pac4j-core…