Tag

oauth2-vulnerability

Safeguard articles tagged "oauth2-vulnerability" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Spring Security OAuth2 client vulnerability (CVE-2022-31690)

CVE-2022-31690 in Spring Security's OAuth2 client can let one principal obtain another's token. Here's the impact, CVSS/EPSS context, and how to remediate.

Dec 22, 20257 min read