pac4j kayıtları
pac4j üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-502 Deserialization of Untrusted Data1
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2023-25581Kavram kanıtı | Deserialization of untrusted data in InternalAttributeHandler in pac4jpac4j · pac4j · CWE-502 | Kritik9,2 | — | %1,9 | 10 Eki 2024 |
34İzleyin | CVE-2026-40459İstismar yok | LDAP Injection in PAC4Jpac4j · pac4j · CWE-90 | Yüksek8,7 | — | %0,7 | 17 Nis 2026 |
30İzleyin | CVE-2021-44878İstismar yok | If an OpenID Connect provider supports the "none" algorithm (i.e., tokens with no signature), pac4j v5.3.0 (and prior) does not refuse it wipac4j · pac4j · CWE-347 | Yüksek7,5 | — | %0,9 | 6 Oca 2022 |
28İzleyin | CVE-2026-40458İstismar yok | Cross-Site Request Forgery in PAC4Jpac4j · pac4j · CWE-352 | Yüksek7,0 | — | %0,2 | 17 Nis 2026 |
19İzleyin | CVE-2019-10755İstismar yok | The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes tpac4j · pac4j · CWE-338 | Orta4,9 | — | %1,1 | 23 Eyl 2019 |
- CVE-2023-2558137İzleyin
Deserialization of untrusted data in InternalAttributeHandler in pac4j
KritikCVSS 9,2Kavram kanıtıEPSS %2pac4j · pac4j10 Eki 2024
- CVE-2026-4045934İzleyin
LDAP Injection in PAC4J
YüksekCVSS 8,7İstismar yokEPSS %1pac4j · pac4j17 Nis 2026
- CVE-2021-4487830İzleyin
If an OpenID Connect provider supports the "none" algorithm (i.e., tokens with no signature), pac4j v5.3.0 (and prior) does not refuse it wi
YüksekCVSS 7,5İstismar yokEPSS %1pac4j · pac4j6 Oca 2022
- CVE-2026-4045828İzleyin
Cross-Site Request Forgery in PAC4J
YüksekCVSS 7,0İstismar yokEPSS %0pac4j · pac4j17 Nis 2026
- CVE-2019-1075519İzleyin
The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes t
OrtaCVSS 4,9İstismar yokEPSS %1pac4j · pac4j23 Eyl 2019