Jwt Grant Type For Oauth2 Wso2 Jwt Grant Type For Oauth2

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Wso2 Jwt Grant Type For Oauth2.

By the Year

In 2026 there have been 1 vulnerability in Wso2 Jwt Grant Type For Oauth2 with an average score of 4.8 out of ten.

Year Vulnerabilities Average Score
2026 1 4.80

It may take a day or so for new Jwt Grant Type For Oauth2 vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Wso2 Jwt Grant Type For Oauth2 Security Vulnerabilities

WSO2 Identity Server JWT/SAML Bearer Grant Tokens Issued for Disabled IDPs
CVE-2025-1397 4.8 - Medium - November 03, 2026

When utilizing JWT Bearer or SAML2 Bearer grant types, the system fails to validate the status of the Identity Provider (IDP) before issuing access tokens. This oversight permits tokens to be generated even when the associated IDP has been disabled. A malicious actor could leverage this vulnerability to obtain access tokens by targeting a disabled IDP. This could enable them to bypass intended security controls and potentially access protected resources that should be inaccessible due to the IDP's disabled state.

AuthZ

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Wso2 Jwt Grant Type For Oauth2 or by Wso2? Click the Watch button to subscribe.

Wso2
Vendor

subscribe