CVE-2026-54430
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-918
Falsificación de solicitud en servidor (SSRF)
Fecha de publicación:
02/07/2026
Última modificación:
02/07/2026
Descripción
*** Pendiente de traducción *** liboauth2 is vulnerable to Server-Side Request Forgery in oauth2_jose_jwks_aws_alb_resolve() function. The AWS ALB verifier reads both signer and kid from the unverified JWT<br />
header. If signer matches the configured ARN, kid is appended to<br />
alb_base_url without URL encoding or path sanitization, and the HTTP GET<br />
is issued before signature verification. This allows an attacker to force<br />
the server to send a GET request to an attacker-chosen internal path.<br />
<br />
This issue was fixed in version 2.3.0
Impacto
Puntuación base 4.0
5.10
Gravedad 4.0
MEDIA