CVE-2022-27240

概要

参考情報

• babelouest/glewlwyd commit 4c5597c · Patch
• babelouest/glewlwyd release v2.6.2 · Release Notes

glewlwyd sso server のその他の脆弱性

• CVE-2024-25715中 6.1Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.
• CVE-2023-49208緊急 9.8scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registr…
• CVE-2021-40818緊急 9.8scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webauthn registration.