Skip to content

org.xwiki.contrib.oidc:oidc-authenticator vulnerabilities (Maven)

2 vulnerabilities.

org.xwiki.contrib.oidc:oidc-authenticator MavenXWiki OIDC Authenticator vulnerable to creation of token for any user with just `view` rightCVE-2025-49594Fix available9.2 CriticalOctober 6, 2025
org.xwiki.contrib.oidc:oidc-authenticator MavenXWiki OIDC Authenticator vulnerable to OpenID login bypass due to improper authenticationCVE-2022-39387Fix available9.1 CriticalNovember 4, 2022