PatchTheCVEmitreid vulnerabilities
Recent CVEs affecting mitreid products. 3 tracked.
mitreid has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-03-25. Highest priority: CVE-2021-27582 (score 63/100).
- CVE-2021-27582 CRITICAL 9.1 UPGRADE org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid
- CVE-2021-26715 CRITICAL 9.1 UPGRADE The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forg
- CVE-2020-5497 MEDIUM 6.1 UPGRADE The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson b
FAQ
How do I fix mitreid vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mitreid being exploited right now?
None of the tracked mitreid CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mitreid CVE should I patch first?
CVE-2021-27582 currently ranks highest (63/100): org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid .