← Database

CVE-2021-46250

CRITICAL CVSS: 10.0 Published: 2022-02-15 Modified: 2026-06-17

Description

An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2.

Affected Platforms

Scratchoauth2 Project Scratchoauth2

Weakness Type

NVD-CWE-noinfo

References