Threats tagged 'ghsa-7h45-367c-v4hm'

This vulnerability involves a failure to validate the status of the Identity Provider (IDP) when using JWT Bearer or SAML2 Bearer grant types. As a result, access tokens can be issued even if the associated IDP has been disabled. This flaw could allow an attacker to obtain access tokens by targeting a disabled IDP, potentially bypassing security controls and accessing protected resources.