CVE-2023-0456 — Apicast proxies the api call with incorrect jwt token to the api backend without proper authorization check
A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a separate realm to …
Published: 2023-09-27 · CVSS: 7.4 · CVSS 3.1
A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a separate realm to be accessible to an attacker, permitting access to unauthorized information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7