Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qwqf-36v4-65w4

Опубликовано: 10 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 7.5

Описание

When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The authenticate command is accessible to unauthenticated clients, leading to pre-auth denial-of-service in affected product configurations.

When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The authenticate command is accessible to unauthenticated clients, leading to pre-auth denial-of-service in affected product configurations.

EPSS

Процентиль: 27%
0.00347
Низкий

8.2 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-1287

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 месяцев назад

When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The authenticate command is accessible to unauthenticated clients, leading to pre-auth denial-of-service in affected product configurations.

CVSS3: 7.5
nvd
около 2 месяцев назад

When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The authenticate command is accessible to unauthenticated clients, leading to pre-auth denial-of-service in affected product configurations.

CVSS3: 7.5
debian
около 2 месяцев назад

When OIDC authentication is enabled in configuration, clients may set ...

EPSS

Процентиль: 27%
0.00347
Низкий

8.2 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-1287