Improper Protection of Alternate Path vulnerability in ash-project ash_authentication_oauth2_server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped...

Résumé

Improper Protection of Alternate Path vulnerability in ash-project ash_authentication_oauth2_server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped to the canonical prefix. oauth2_server_protocol_routes/1 in AshAuthentication.Phoenix.Oauth2Server...

Références

• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db
• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db
• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db
• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db