Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:pac4j:pac4j-Oidc:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authentication Bypass in pac4j-oidc via Token Forgery

An authorization bypass vulnerability in pac4j-oidc versions prior to 6.5.6 allows attackers to forge OIDC access tokens by exploiting the library's failure to validate token signatures, issuers, audiences, and expiration.

pac4j-oidc vulnerability authentication-bypass oidc identity-security
1t 1c