Threats tagged 'cleanstart-2026-pd43830'

A security vulnerability in the wso2am package affects versions prior to 4.7.0-r4. The flaw involves improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider. This allows a remote attacker to obtain multiple valid access tokens from a single authorization code by exploiting concurrent token exchange requests. The vulnerability has a high severity rating with a CVSS score of 8.1.