Skip to content
OpenAdvisories

Vendor

a466350665

4 known vulnerabilities.

Products

smart-sso 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-111622

    smart-sso through 2.1.1 OAuth2 Authorization Code Theft via Unvalidated redirectUri

    smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter. Attackers can send crafted /login links to users…

    a466350665 smart-sso
  • Medium 4.3
    CVE-2026-2971

    a466350665 Smart-SSO Login login.html cross site scripting

    A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirect…

    a466350665 smart-sso