Glewlwyd Sso Server Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Glewlwyd Sso Server Project records in CISA KEV

No Glewlwyd Sso Server Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2023-26859 CVE-2023-49208 · GHSA-x7rh-wvh4-cx6x

MEDIUM 51

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00882 Published 2023-11-23 No fix listed CWE-120

TI-2022-10359 CVE-2022-27240

MEDIUM 45

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01557 Published 2022-03-18 No fix listed CWE-120

TI-2021-17746 CVE-2021-40818 · GHSA-ppv3-px64-q9mx

MEDIUM 45

scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webauthn registration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01492 Published 2021-09-08 No fix listed CWE-120

TI-2024-16921 CVE-2024-25715 · GHSA-vxrh-jfch-hqcf

LOW 27

Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00414 Published 2024-02-11 No fix listed CWE-601