PatchTheCVEoauth \& openid connect single sign-on vulnerabilities and fixes
Recent CVEs affecting oauth \& openid connect single sign-on, with upgrade or downgrade steps. 1 tracked.
Also searched as: oauth \& openid connect single sign on, oauth\&openidconnectsinglesign-on.
oauth \& openid connect single sign-on has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-01-09. Highest priority: CVE-2024-13301 (score 26/100).
- CVE-2024-13301 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal O
FAQ
How do I fix oauth \& openid connect single sign-on vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is oauth \& openid connect single sign-on being exploited right now?
None of the tracked oauth \& openid connect single sign-on CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which oauth \& openid connect single sign-on CVE should I patch first?
CVE-2024-13301 currently ranks highest (26/100): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal O.