Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-57818

Опубликовано: 06 авг. 2026
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*
Версия до 3.6.12 (исключая)
cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая) до 4.1.8 (исключая)
cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*
Версия от 4.2.0 (включая) до 4.2.3 (исключая)

EPSS

Процентиль: 27%
0.00344
Низкий

8.1 High

CVSS3

Дефекты

CWE-367

Связанные уязвимости

redhat логотип

CVE-2026-57818

CVSS3: 4.2
redhat
около 1 месяца назад

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

github логотип

GHSA-4qr2-3mpc-grqm

CVSS3: 8.1
github
около 1 месяца назад

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

EPSS

Процентиль: 27%
0.00344
Низкий

8.1 High

CVSS3

Дефекты

CWE-367