Critical defect in Java security engine poses serious downstream security risks

Attackers can exploit the defect in the widely deployed pac4j with relative ease, but researchers haven’t observed active exploitation in the wild.

First seen on cyberscoop.com

Jump to article: cyberscoop.com/pac4j-open-source-library-vulnerability-max-severity-risk/