Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an...

Summary

Improper Authentication vulnerability in ash-project ash_authentication_oauth2_server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an initial access token. resolve_secret/3 in AshAuthentication.Oauth2Server (reached through __resolve...

References

• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db
• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db
• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db
• web 6b3ad84c-e1a6-4bf7-a703-f496b71e49db