Gluu: Security Vulnerabilities
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.
CVSS Score
9.8
EPSS Score
0.085
Published
2022-09-06
A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.
CVSS Score
6.1
EPSS Score
0.003
Published
2020-02-16