← Database

CVE-2026-23603

LOW CVSS: 3.1 Published: 2026-08-13 Modified: 2026-08-14

Description

Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim

Affected Platforms

Unknown

Weakness Type

CWE-918

References