https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:44:40 +0000 https://cve.radiocsirt.org/vuln/cve-2021-22696 <p><strong>Affected:</strong> Apache Software Foundation Apache CXF</p> <p>CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a &#34;request&#34; parameter, the spec also supports specifying a URI from which to retrieve a JWT token from via the &#34;request_uri&#34; parameter. CXF was not validating the &#34;request_uri&#34; parameter (apart from ensuring it uses &#34;https) and was making a REST request to the parameter in the request to retrieve a token. This means that CXF was vulnerable to DDos attacks on the authorization server, as specified in section 10.4.1 of the spec. This issue affects Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache CXF</p> <p>CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a &#34;request&#34; parameter, the spec also supports specifying a URI from which to retrieve a JWT token from via the &#34;request_uri&#34; parameter. CXF was not validating the &#34;request_uri&#34; parameter (apart from ensuring it uses &#34;https) and was making a REST request to the parameter in the request to retrieve a token. This means that CXF was vulnerable to DDos attacks on the authorization server, as specified in section 10.4.1 of the spec. This issue affects Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10.</p> https://cve.radiocsirt.org/vuln/cve-2021-22696