Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 35

Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider (IdP) to deliver authentication mate…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00379 Published 2026-10-06 No fix listed CWE-601
Priority LOW 24

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of t…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00308 Published 2026-10-06 No fix listed CWE-601