CVE-2022-36663

Description

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

Affected packages (1)

• Maven/org.gluu:oxauth-commonfrom 0, < 4.4.1

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-36663
• PATCHhttps://github.com/GluuFederation/oxAuth
• WEBhttps://github.com/GluuFederation/oxAuth/commit/58c4ac9bbf2addf4b419bf155de99db57a202f5c
• WEBhttps://github.com/GluuFederation/oxAuth/releases/tag/4.4.1
• WEBhttps://gluu.org/gluu-4-4-1