Mitreid Connect
3 CVEs affecting Mitreid Connect. Latest disclosed: 2021-03-25. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26715 | Critical | 9.1 | 2021-03-25 | The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF) vulnerability. The vulnerability arise… |
CVE-2021-27582 | Critical | 9.1 | 2021-02-23 | org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment… |
CVE-2020-5497 | Medium | 6.1 | 2020-01-04 | The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is re… |