Skip to content
OpenAdvisories

Package · Maven

org.mitre:openid-connect-parent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2021-27582

    Autobinding vulnerability in MITREid Connect

    org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment (aka Autobinding) vulnerability. This arises due to unsafe usage of the @ModelAttribute annotation d…

    org.mitre:openid-connect-parent Maven