org.apache.cxf:cxf-rt-rs-security-sso-oidc vulnerabilities (TuxCare)
4 vulnerabilities.
org.apache.cxf:cxf-rt-rs-security-sso-oidcTuxCareApache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter9.1 Criticalorg.apache.cxf:cxf-rt-rs-security-sso-oidcTuxCareApache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters9.1 Criticalorg.apache.cxf:cxf-rt-rs-security-sso-oidcTuxCareApache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay9.8 Criticalorg.apache.cxf:cxf-rt-rs-security-sso-oidcTuxCareApache CXF: Untrusted JMS configuration can lead to RCE9.8 Critical