https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 19:06:50 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-07177 cnvd-2017-07177 https://cve.radiocsirt.org/vuln/cnvd-2017-07177 https://cve.radiocsirt.org/vuln/euvd-2026-74846 EUVD-2026-74846 https://cve.radiocsirt.org/vuln/euvd-2026-74846 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7662 <p>Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active.</p> <p>Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7662 https://cve.radiocsirt.org/vuln/ghsa-f5ch-36rg-vfcc <p><strong>Affected:</strong> Maven: org.apache.cxf.fediz:fediz-oidc</p> <p>Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf.fediz:fediz-oidc</p> <p>Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active.</p> https://cve.radiocsirt.org/vuln/ghsa-f5ch-36rg-vfcc https://cve.radiocsirt.org/vuln/gsd-2017-7662 gsd-2017-7662 https://cve.radiocsirt.org/vuln/gsd-2017-7662