PT-2026-69303 · Unknown · Oidc-Authorizer
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
lmammino oidc-authorizer version 0.4.0
Description
A flaw in the Authorization Header Parsing component allows remote attackers to cause a denial of service. The issue occurs within the
parse token from header() function located in the src/parse token from header.rs file when the authorization token argument is manipulated.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, restrict the use of the
parse token from header() function to minimize the risk of exploitation.Exploit
DoS
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Oidc-Authorizer