Glewlwyd Sso Server Project Glewlwyd Sso Server
4 CVEs affecting Glewlwyd Sso Server Project Glewlwyd Sso Server. Latest disclosed: 2024-02-11. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-49208 | Critical | 9.8 | 2023-11-23 | scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration. |
CVE-2022-27240 | Critical | 9.8 | 2022-03-18 | scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion. |
CVE-2021-40818 | Critical | 9.8 | 2021-09-08 | scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webauthn registration. |
CVE-2024-25715 | Medium | 6.1 | 2024-02-11 | Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri. |