Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Rust Sgx Sdk
NVD
GitHub
CVSS 3.1
9.8
EPSS
3.2%
The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
XSS
Connect
NVD
GitHub
CVSS 3.1
6.1
EPSS
2.1%