Entrar Obtener clave API

Vulnerabilidades de VMware by Broadcom Spring Security (OAuth2 Authorization Server module) (CVE)

Registros CVE publicados para VMware by Broadcom Spring Security (OAuth2 Authorization Server module), los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

9.6Crítica

CVE-2026-59354 hace 2 meses

Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata

VMware by Broadcom Spring Security (OAuth2 Authorization Server module)

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the regis…