Duendesoftware Identityserver
2 CVEs affecting Duendesoftware Identityserver. Latest disclosed: 2024-10-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-39694 | Medium | 4.7 | 2024-07-31 | Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to craft malicious Urls that certain functi… |
CVE-2024-49755 | Low | 3.1 | 2024-10-28 | Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. IdentityServer's local API authentication handler performs insufficient va… |