Threats tagged 'ghsa-83r6-96m8-r52p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.4	EPSS 0.3%	CVE-2026-50631Org.apache.cxf:cxf rt rs security oauth2: Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token Processing High7.4EPSS 0.3%2026-06-12GCVE DatabaseCVE-2026-50631 A race condition vulnerability in Apache CXF OAuth2 AbstractOAuthDataProvider allows concurrent use of the same refresh token to generate multiple valid access tokens when 'recycleRefreshTokens' is set to false. This bypasses the intended single-use refresh token semantics. The issue is fixed in versions 4.2.2 and 4.1.7. EPSS 0.3%Report on CVE-2026-50631 Vulnerability CWE-367 #ghsa-83r6-96m8-r52p #maven	GCVE Database	2026-06-12

Page 1 of 1