Skip to content
Threat Feed
Subscribe

Product

Pac4j-Oidc (< 6.5.6)

1 brief RSS
high advisory

Authentication Bypass in pac4j-oidc via Token Forgery

An authorization bypass vulnerability in pac4j-oidc versions prior to 6.5.6 allows attackers to forge OIDC access tokens by exploiting the library's failure to validate token signatures, issuers, audiences, and expiration.

pac4j-oidc vulnerability authentication-bypass oidc identity-security
1t 1c