Beveiligingsadvies

CVE-2024-1233

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-09 07:01:47

Laatst bijgewerkt 2025-12-01 12:49:56

Toegewezen door redhat

CVSS-score 7.3

Status PUBLISHED

Beschrijving

A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no whitelisting or other filtering behavior is performed on the destination URL address, which may result in a server-side request forgery (SSRF) vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗