Oidc Authorizer
Monthly
Unsafe deserialization in lmammino/oidc-authorizer (versions up to 0.4.0) exposes confidential data via manipulated JWT claims submitted to the Fixed Message Handler component. The vulnerable code path runs through the `unwrap` function in `src/handler.rs`, which processes the `jwtClaims` argument without adequate deserialization controls - particularly concerning given this component's role as an OIDC authorization gatekeeper. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms remote, unauthenticated exploitation with low complexity; a public proof-of-concept exists (E:P), and the vendor has not responded to disclosure, meaning no patch has been confirmed.
Denial of service in lmammino oidc-authorizer 0.4.0 can be triggered remotely by submitting a crafted value for the authorization_token argument processed by the parse_token_from_header function in the Authorization Header Parsing component. Any service using this Rust library to validate OIDC tokens via the HTTP Authorization header is exposed to availability disruption without requiring authentication. A public proof-of-concept exploit has been disclosed, though the vulnerability is not confirmed as actively exploited in CISA KEV.
Unsafe deserialization in lmammino/oidc-authorizer (versions up to 0.4.0) exposes confidential data via manipulated JWT claims submitted to the Fixed Message Handler component. The vulnerable code path runs through the `unwrap` function in `src/handler.rs`, which processes the `jwtClaims` argument without adequate deserialization controls - particularly concerning given this component's role as an OIDC authorization gatekeeper. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms remote, unauthenticated exploitation with low complexity; a public proof-of-concept exists (E:P), and the vendor has not responded to disclosure, meaning no patch has been confirmed.
Denial of service in lmammino oidc-authorizer 0.4.0 can be triggered remotely by submitting a crafted value for the authorization_token argument processed by the parse_token_from_header function in the Authorization Header Parsing component. Any service using this Rust library to validate OIDC tokens via the HTTP Authorization header is exposed to availability disruption without requiring authentication. A public proof-of-concept exploit has been disclosed, though the vulnerability is not confirmed as actively exploited in CISA KEV.