thephpleague

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

thephpleague records in CISA KEV

No thephpleague vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Oauth2-server · all components

TI-2023-18890 CVE-2023-37260 · GHSA-wj7q-gjg8-3cpm

MEDIUM 43

league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00951 Published 2023-07-06 Fixed in 8.5.3, 8.4.2 CWE-209