Nginx Openid Connect

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-10318 Nov 06, 17:15 MEDIUM This Month

A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nginx Session Fixation Nginx Ingress Controller Nginx Instance Manager +3

NVD

CVSS 4.0

5.1

EPSS

0.3%

CVE-2024-10318

EPSS 0% CVSS 5.1

MEDIUM This Month

A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nginx Session Fixation +5

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy