Vendor/product archive

f5 / nginx_openid_connect CVEs

Beta · best-effort

1 CVEs tagged to f5 / nginx_openid_connect — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to f5 vendor archive

CVE-2024-10318

Published Nov 6, 2024

A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a vi…

CVSS 5.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1