Skip to content
OpenAdvisories

Package · Maven

org.pac4j:pac4j-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2023-25581 Public exploit

    Deserialization of untrusted data in InternalAttributeHandler in pac4j

    pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the `UserProfile` class from pac4j-core…

    pac4j pac4j org.pac4j:pac4j-core Maven