Skip to content
OpenAdvisories

Package · Packagist

causal/oidc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.2
    CVE-2025-24856

    TYPO3-EXT-SA-2025-001: Account Takeover in extension "OpenID Connect Authentication" (oidc)

    An issue was discovered in the oidc (aka OpenID Connect Authentication) extension before 4.0.0 for TYPO3. The account linking logic allows a pre-hijacking attack, leading to Account Takeover. The attack can only be exploited if the following requirements are …

    TYPO3 oidc causal/oidc Packagist
  • Medium 6.5
    CVE-2024-30173

    OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass

    The authentication service of the extension does not verify the OpenID Connect authentication state from the user lookup chain. Instead, the authentication service authenticates every valid frontend user from the user lookup chain, where the frontend user fie…

    causal/oidc Packagist