Threat Intelligence Database

A denial of service vulnerability exists in lmammino oidc-authorizer version 0.4.0 affecting the Authorization Header Parsing component. The flaw is in the parse_token_from_header function, where manipulation of the authorization_token argument can cause a denial of service. Remote exploitation is possible, and the vulnerability has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or fix is currently available.

A vulnerability exists in lmammino oidc-authorizer up to version 0.4.0 in the unwrap function of src/handler.rs. The issue involves manipulation of the jwtClaims argument leading to unsafe deserialization. This vulnerability can be exploited remotely. The vendor has not responded to disclosure attempts. The CVSS score is 5.3, indicating a medium severity risk.

A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulation results in sensitive information in log files. The attack can be executed remotely. `src/handler.rs` logs raw Authorization header values and complete bearer tokens/JWTs on authentication failure paths, potentially exposing credentials through CloudWatch Logs. `src/models.rs` serializes the complete validated JWT claims set with `serde_json::to_string(token_claims).unwrap()` and propagates it through `context["jwtClaims"]` to downstream integrations. This code performs serialization, not deserialization, and does not process attacker-controlled `jwtClaims` input. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parse_token_from_header of the file src/parse_token_from_header.rs of the component Authorization Header Parsing. The manipulation of the argument authorization_token leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.