VendorsOryfositeany version
Vulnerabilities

Ory Fosite any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2020-15222
Replay of private_key_jwt possible in ORY Fosite
Published 2020-09-24 · Modified
8.1EPSS 0.009
CVE-2020-15223
Ignored storage errors on token revokation in ORY Fosite
Published 2020-09-24 · Modified
8.0EPSS 0.016
CVE-2020-15234
Redirect URL matching ignores character casing
Published 2020-10-02 · Modified
6.1EPSS 0.008
CVE-2020-15233
OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses
Published 2020-10-02 · Modified
6.1EPSS 0.008