Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
light-oauth2 信任管理问题漏洞
Vulnerability Description
light-oauth2是networknt开源的一款基于 light-4j 的快速、轻量级云原生 OAuth 2.0 授权微服务。 light-oauth2 2.1.27之前版本存在安全漏洞，该漏洞源于获取公钥无需任何验证，允许攻击者使用精心设计的JWT令牌对应用程序进行身份验证。
CVSS Information
N/A
Vulnerability Type
N/A