Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-15222

In ORY Fosite (the security first OAuth2 & OpenID Connect framework for Go) before version 0.31.0, when using "private_key_jwt" authentication the uniqueness of the `jti` value is not checked. When using client authentication method "private_key_jwt", OpenId specification says the following about assertion `jti`: "A unique identifier for the token, which can be used to prevent reuse of the token. These tokens MUST only be used once, unless conditions for reuse were negotiated between the parties". Hydra does not seem to check the uniqueness of this `jti` value. This problem is fixed in version 0.31.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.9%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.8
Products affected by CVE-2020-15222
  • Ory » Fosite » Version: N/A
    cpe:2.3:a:ory:fosite:-
  • Ory » Fosite » Version: 0.1.0
    cpe:2.3:a:ory:fosite:0.1.0
  • Ory » Fosite » Version: 0.10.0
    cpe:2.3:a:ory:fosite:0.10.0
  • Ory » Fosite » Version: 0.11.0
    cpe:2.3:a:ory:fosite:0.11.0
  • Ory » Fosite » Version: 0.11.1
    cpe:2.3:a:ory:fosite:0.11.1
  • Ory » Fosite » Version: 0.11.2
    cpe:2.3:a:ory:fosite:0.11.2
  • Ory » Fosite » Version: 0.11.3
    cpe:2.3:a:ory:fosite:0.11.3
  • Ory » Fosite » Version: 0.11.4
    cpe:2.3:a:ory:fosite:0.11.4
  • Ory » Fosite » Version: 0.12.0
    cpe:2.3:a:ory:fosite:0.12.0
  • Ory » Fosite » Version: 0.13.0
    cpe:2.3:a:ory:fosite:0.13.0
  • Ory » Fosite » Version: 0.13.1
    cpe:2.3:a:ory:fosite:0.13.1
  • Ory » Fosite » Version: 0.14.0
    cpe:2.3:a:ory:fosite:0.14.0
  • Ory » Fosite » Version: 0.14.1
    cpe:2.3:a:ory:fosite:0.14.1
  • Ory » Fosite » Version: 0.14.2
    cpe:2.3:a:ory:fosite:0.14.2
  • Ory » Fosite » Version: 0.15.0
    cpe:2.3:a:ory:fosite:0.15.0
  • Ory » Fosite » Version: 0.15.1
    cpe:2.3:a:ory:fosite:0.15.1
  • Ory » Fosite » Version: 0.15.2
    cpe:2.3:a:ory:fosite:0.15.2
  • Ory » Fosite » Version: 0.15.3
    cpe:2.3:a:ory:fosite:0.15.3
  • Ory » Fosite » Version: 0.15.4
    cpe:2.3:a:ory:fosite:0.15.4
  • Ory » Fosite » Version: 0.15.5
    cpe:2.3:a:ory:fosite:0.15.5
  • Ory » Fosite » Version: 0.15.6
    cpe:2.3:a:ory:fosite:0.15.6
  • Ory » Fosite » Version: 0.16.0
    cpe:2.3:a:ory:fosite:0.16.0
  • Ory » Fosite » Version: 0.16.1
    cpe:2.3:a:ory:fosite:0.16.1
  • Ory » Fosite » Version: 0.16.2
    cpe:2.3:a:ory:fosite:0.16.2
  • Ory » Fosite » Version: 0.16.3
    cpe:2.3:a:ory:fosite:0.16.3
  • Ory » Fosite » Version: 0.16.4
    cpe:2.3:a:ory:fosite:0.16.4
  • Ory » Fosite » Version: 0.16.5
    cpe:2.3:a:ory:fosite:0.16.5
  • Ory » Fosite » Version: 0.17.0
    cpe:2.3:a:ory:fosite:0.17.0
  • Ory » Fosite » Version: 0.17.1
    cpe:2.3:a:ory:fosite:0.17.1
  • Ory » Fosite » Version: 0.17.2
    cpe:2.3:a:ory:fosite:0.17.2
  • Ory » Fosite » Version: 0.18.0
    cpe:2.3:a:ory:fosite:0.18.0
  • Ory » Fosite » Version: 0.18.1
    cpe:2.3:a:ory:fosite:0.18.1
  • Ory » Fosite » Version: 0.19.0
    cpe:2.3:a:ory:fosite:0.19.0
  • Ory » Fosite » Version: 0.19.1
    cpe:2.3:a:ory:fosite:0.19.1
  • Ory » Fosite » Version: 0.19.2
    cpe:2.3:a:ory:fosite:0.19.2
  • Ory » Fosite » Version: 0.19.3
    cpe:2.3:a:ory:fosite:0.19.3
  • Ory » Fosite » Version: 0.19.4
    cpe:2.3:a:ory:fosite:0.19.4
  • Ory » Fosite » Version: 0.19.5
    cpe:2.3:a:ory:fosite:0.19.5
  • Ory » Fosite » Version: 0.19.6
    cpe:2.3:a:ory:fosite:0.19.6
  • Ory » Fosite » Version: 0.19.7
    cpe:2.3:a:ory:fosite:0.19.7
  • Ory » Fosite » Version: 0.19.8
    cpe:2.3:a:ory:fosite:0.19.8
  • Ory » Fosite » Version: 0.2.0
    cpe:2.3:a:ory:fosite:0.2.0
  • Ory » Fosite » Version: 0.2.1
    cpe:2.3:a:ory:fosite:0.2.1
  • Ory » Fosite » Version: 0.2.2
    cpe:2.3:a:ory:fosite:0.2.2
  • Ory » Fosite » Version: 0.2.3
    cpe:2.3:a:ory:fosite:0.2.3
  • Ory » Fosite » Version: 0.2.4
    cpe:2.3:a:ory:fosite:0.2.4
  • Ory » Fosite » Version: 0.20.0
    cpe:2.3:a:ory:fosite:0.20.0
  • Ory » Fosite » Version: 0.20.1
    cpe:2.3:a:ory:fosite:0.20.1
  • Ory » Fosite » Version: 0.20.2
    cpe:2.3:a:ory:fosite:0.20.2
  • Ory » Fosite » Version: 0.20.3
    cpe:2.3:a:ory:fosite:0.20.3
  • Ory » Fosite » Version: 0.21.0
    cpe:2.3:a:ory:fosite:0.21.0
  • Ory » Fosite » Version: 0.21.1
    cpe:2.3:a:ory:fosite:0.21.1
  • Ory » Fosite » Version: 0.21.2
    cpe:2.3:a:ory:fosite:0.21.2
  • Ory » Fosite » Version: 0.21.3
    cpe:2.3:a:ory:fosite:0.21.3
  • Ory » Fosite » Version: 0.21.4
    cpe:2.3:a:ory:fosite:0.21.4
  • Ory » Fosite » Version: 0.21.5
    cpe:2.3:a:ory:fosite:0.21.5
  • Ory » Fosite » Version: 0.22.0
    cpe:2.3:a:ory:fosite:0.22.0
  • Ory » Fosite » Version: 0.23.0
    cpe:2.3:a:ory:fosite:0.23.0
  • Ory » Fosite » Version: 0.24.0
    cpe:2.3:a:ory:fosite:0.24.0
  • Ory » Fosite » Version: 0.25.0
    cpe:2.3:a:ory:fosite:0.25.0
  • Ory » Fosite » Version: 0.25.1
    cpe:2.3:a:ory:fosite:0.25.1
  • Ory » Fosite » Version: 0.26.0
    cpe:2.3:a:ory:fosite:0.26.0
  • Ory » Fosite » Version: 0.26.1
    cpe:2.3:a:ory:fosite:0.26.1
  • Ory » Fosite » Version: 0.27.0
    cpe:2.3:a:ory:fosite:0.27.0
  • Ory » Fosite » Version: 0.27.1
    cpe:2.3:a:ory:fosite:0.27.1
  • Ory » Fosite » Version: 0.27.2
    cpe:2.3:a:ory:fosite:0.27.2
  • Ory » Fosite » Version: 0.27.3
    cpe:2.3:a:ory:fosite:0.27.3
  • Ory » Fosite » Version: 0.27.4
    cpe:2.3:a:ory:fosite:0.27.4
  • Ory » Fosite » Version: 0.28.0
    cpe:2.3:a:ory:fosite:0.28.0
  • Ory » Fosite » Version: 0.28.1
    cpe:2.3:a:ory:fosite:0.28.1
  • Ory » Fosite » Version: 0.29.0
    cpe:2.3:a:ory:fosite:0.29.0
  • Ory » Fosite » Version: 0.29.1
    cpe:2.3:a:ory:fosite:0.29.1
  • Ory » Fosite » Version: 0.29.2
    cpe:2.3:a:ory:fosite:0.29.2
  • Ory » Fosite » Version: 0.29.3
    cpe:2.3:a:ory:fosite:0.29.3
  • Ory » Fosite » Version: 0.29.4
    cpe:2.3:a:ory:fosite:0.29.4
  • Ory » Fosite » Version: 0.29.5
    cpe:2.3:a:ory:fosite:0.29.5
  • Ory » Fosite » Version: 0.29.6
    cpe:2.3:a:ory:fosite:0.29.6
  • Ory » Fosite » Version: 0.29.7
    cpe:2.3:a:ory:fosite:0.29.7
  • Ory » Fosite » Version: 0.29.8
    cpe:2.3:a:ory:fosite:0.29.8
  • Ory » Fosite » Version: 0.3.0
    cpe:2.3:a:ory:fosite:0.3.0
  • Ory » Fosite » Version: 0.3.1
    cpe:2.3:a:ory:fosite:0.3.1
  • Ory » Fosite » Version: 0.3.2
    cpe:2.3:a:ory:fosite:0.3.2
  • Ory » Fosite » Version: 0.3.3
    cpe:2.3:a:ory:fosite:0.3.3
  • Ory » Fosite » Version: 0.3.4
    cpe:2.3:a:ory:fosite:0.3.4
  • Ory » Fosite » Version: 0.3.5
    cpe:2.3:a:ory:fosite:0.3.5
  • Ory » Fosite » Version: 0.3.6
    cpe:2.3:a:ory:fosite:0.3.6
  • Ory » Fosite » Version: 0.30.0
    cpe:2.3:a:ory:fosite:0.30.0
  • Ory » Fosite » Version: 0.30.1
    cpe:2.3:a:ory:fosite:0.30.1
  • Ory » Fosite » Version: 0.30.2
    cpe:2.3:a:ory:fosite:0.30.2
  • Ory » Fosite » Version: 0.30.3
    cpe:2.3:a:ory:fosite:0.30.3
  • Ory » Fosite » Version: 0.30.4
    cpe:2.3:a:ory:fosite:0.30.4
  • Ory » Fosite » Version: 0.30.5
    cpe:2.3:a:ory:fosite:0.30.5
  • Ory » Fosite » Version: 0.30.6
    cpe:2.3:a:ory:fosite:0.30.6
  • Ory » Fosite » Version: 0.4.0
    cpe:2.3:a:ory:fosite:0.4.0
  • Ory » Fosite » Version: 0.5.0
    cpe:2.3:a:ory:fosite:0.5.0
  • Ory » Fosite » Version: 0.5.1
    cpe:2.3:a:ory:fosite:0.5.1
  • Ory » Fosite » Version: 0.6.0
    cpe:2.3:a:ory:fosite:0.6.0
  • Ory » Fosite » Version: 0.6.1
    cpe:2.3:a:ory:fosite:0.6.1
  • Ory » Fosite » Version: 0.6.10
    cpe:2.3:a:ory:fosite:0.6.10
  • Ory » Fosite » Version: 0.6.11
    cpe:2.3:a:ory:fosite:0.6.11
  • Ory » Fosite » Version: 0.6.12
    cpe:2.3:a:ory:fosite:0.6.12
  • Ory » Fosite » Version: 0.6.13
    cpe:2.3:a:ory:fosite:0.6.13
  • Ory » Fosite » Version: 0.6.14
    cpe:2.3:a:ory:fosite:0.6.14
  • Ory » Fosite » Version: 0.6.15
    cpe:2.3:a:ory:fosite:0.6.15
  • Ory » Fosite » Version: 0.6.17
    cpe:2.3:a:ory:fosite:0.6.17
  • Ory » Fosite » Version: 0.6.18
    cpe:2.3:a:ory:fosite:0.6.18
  • Ory » Fosite » Version: 0.6.19
    cpe:2.3:a:ory:fosite:0.6.19
  • Ory » Fosite » Version: 0.6.2
    cpe:2.3:a:ory:fosite:0.6.2
  • Ory » Fosite » Version: 0.6.3
    cpe:2.3:a:ory:fosite:0.6.3
  • Ory » Fosite » Version: 0.6.4
    cpe:2.3:a:ory:fosite:0.6.4
  • Ory » Fosite » Version: 0.6.5
    cpe:2.3:a:ory:fosite:0.6.5
  • Ory » Fosite » Version: 0.6.6
    cpe:2.3:a:ory:fosite:0.6.6
  • Ory » Fosite » Version: 0.6.7
    cpe:2.3:a:ory:fosite:0.6.7
  • Ory » Fosite » Version: 0.6.8
    cpe:2.3:a:ory:fosite:0.6.8
  • Ory » Fosite » Version: 0.6.9
    cpe:2.3:a:ory:fosite:0.6.9
  • Ory » Fosite » Version: 0.7.0
    cpe:2.3:a:ory:fosite:0.7.0
  • Ory » Fosite » Version: 0.8.0
    cpe:2.3:a:ory:fosite:0.8.0
  • Ory » Fosite » Version: 0.9.0
    cpe:2.3:a:ory:fosite:0.9.0
  • Ory » Fosite » Version: 0.9.1
    cpe:2.3:a:ory:fosite:0.9.1
  • Ory » Fosite » Version: 0.9.2
    cpe:2.3:a:ory:fosite:0.9.2
  • Ory » Fosite » Version: 0.9.3
    cpe:2.3:a:ory:fosite:0.9.3
  • Ory » Fosite » Version: 0.9.4
    cpe:2.3:a:ory:fosite:0.9.4
  • Ory » Fosite » Version: 0.9.5
    cpe:2.3:a:ory:fosite:0.9.5
  • Ory » Fosite » Version: 0.9.6
    cpe:2.3:a:ory:fosite:0.9.6
  • Ory » Fosite » Version: 0.9.7
    cpe:2.3:a:ory:fosite:0.9.7


Products
Pricing
Contact Us

Shodan ® - All rights reserved