org.xwiki.contrib.oidc:oidc-authenticator
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view | org.xwiki.contrib.oidc:oidc-authenticator | Maven | Critical | Fix reported | |
| XWiki OIDC Authenticator vulnerable to bypassing OpenID login by providing a custom provider | org.xwiki.contrib.oidc:oidc-authenticator | Maven | Critical | Fix reported |