What’s Vulnerable › Products

ory fosite vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your ory fosite version is affected

Latest ory fosite vulnerabilities

• CVE-2020-15234 — Redirect URL matching ignores character casing (CVSS 4.8)
• CVE-2020-15233 — OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses (CVSS 4.8)
• CVE-2020-15223 — Ignored storage errors on token revokation in ORY Fosite (CVSS 8.0)
• CVE-2020-15222 — Replay of private_key_jwt possible in ORY Fosite (CVSS 8.1)