Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qr2-3mpc-grqm

Опубликовано: 06 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

EPSS

Процентиль: 27%
0.00344
Низкий

8.1 High

CVSS3

Дефекты

CWE-367

Связанные уязвимости

CVSS3: 4.2
redhat
около 1 месяца назад

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

CVSS3: 8.1
nvd
около 1 месяца назад

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

EPSS

Процентиль: 27%
0.00344
Низкий

8.1 High

CVSS3

Дефекты

CWE-367