Threats tagged 'ghsa-xf62-wr5p-5p95'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-50630Org.apache.cxf:cxf rt rs security oauth2: Apache CXF OAuth2 HTTP Response Splitting via WWW-Authenticate Realm Medium6.5EPSS 0.4%2026-06-12GCVE DatabaseCVE-2026-50630 A CRLF injection vulnerability in Apache CXF OAuth2 AuthorizationUtils allows injection of arbitrary HTTP headers or response splitting via the 'realm' parameter in the WWW-Authenticate header. Versions prior to 4.2.2 and before 4.1.7 are affected. The issue is fixed in versions 4.2.2 and 4.1.7. EPSS 0.4%Report on CVE-2026-50630 Vulnerability CWE-113 #ghsa-xf62-wr5p-5p95 #maven	GCVE Database	2026-06-12

Page 1 of 1