Description
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.
Remediation
References
https://github.com/GluuFederation/oxAuth/releases/tag/4.4.1
https://gluu.org/gluu-4-4-1/
Related Vulnerabilities
CVE-2022-0691 Vulnerability in npm package url-parse
CVE-2020-15095 Vulnerability in npm package npm
CVE-2022-28355 Vulnerability in maven package org.scala-js:scalajs-library_2.12
CVE-2018-1000013 Vulnerability in maven package org.jenkins-ci.plugins:release
CVE-2018-1002204 Vulnerability in maven package org.webjars:adm-zip