CVE-2022-36663 Information

Description

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

Reference

https://gluu.org/gluu-4-4-1/ https://github.com/GluuFederation/oxAuth/releases/tag/4.4.1