oltu-oauth2-example
oltu-oauth2-example copied to clipboard
v5tech
使用Apache Oltu 搭建Oauth2 Server及Client开放授权
Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.2.3 to 2.12.6.1. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [shiro-core](https://github.com/apache/shiro) from 1.2.2 to 1.9.1. Changelog Sourced from shiro-core's changelog. Licensed to the Apache Software Foundation (ASF) under one or more contributor license agreements. See the NOTICE file distributed...
Bumps [resteasy-client](https://github.com/resteasy/Resteasy) from 3.0.9.Final to 3.14.0.Final. Release notes Sourced from resteasy-client's releases. v3.9.2.Final In this release: springboot.ver = 2.5.7 resteasy.ver = 3.15.3.Final Commits 460ce3e [RESTEASY-2786] 3.14.0-SNAPSHOT->3.14.0.Final 1918547 [RESTEASY-2772] Backing out...
Bumps [mysql-connector-java](https://github.com/mysql/mysql-connector-j) from 5.1.25 to 8.0.28. Changelog Sourced from mysql-connector-java's changelog. Changelog https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/ Version 8.0.29 Fix for Bug#21978230, COMMENT PARSING NOT PROPER IN PREPSTMT.EXECUTEBATCH(). Fix for Bug#81468 (23312764), MySQL server...
Bumps [gson](https://github.com/google/gson) from 2.3.1 to 2.8.9. Release notes Sourced from gson's releases. Gson 2.8.9 Make OSGi bundle's dependency on sun.misc optional (#1993). Deprecate Gson.excluder() exposing internal Excluder class (#1986). Prevent...
Bumps [gson](https://github.com/google/gson) from 2.3.1 to 2.8.9. Release notes Sourced from gson's releases. Gson 2.8.9 Make OSGi bundle's dependency on sun.misc optional (#1993). Deprecate Gson.excluder() exposing internal Excluder class (#1986). Prevent...
Bumps [spring-webmvc](https://github.com/spring-projects/spring-framework) from 4.0.0.RELEASE to 5.3.18. Release notes Sourced from spring-webmvc's releases. v5.3.18 :star: New Features Restrict access to property paths on Class references #28261 Introduce cancel(boolean mayInterruptIfRunning) in ScheduledTask...
检测到 ameizi/oltu-oauth2-example 一共引入了49个开源组件，存在76个漏洞 ``` 漏洞标题：Oracle MySQL 输入验证错误漏洞 缺陷组件：mysql:[email protected] 漏洞编号：CVE-2021-2471 漏洞描述：Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。 Oracle MySQL 的 MySQL Connectors 产品中存在输入验证错误漏洞，该漏洞允许高特权攻击者通过多种协议访问网络来破坏 MySQL 连接器。成功攻击此漏洞会导致对关键数据的未授权访问或对所有 MySQL 连接器可访问数据的完全访问，以及导致 MySQL 连接器挂起或频繁重复崩溃。 影响范围：(∞, 8.0.27) 最小修复版本：8.0.27 缺陷组件引入路径：cn.zetark.oauth2.server:[email protected]>mysql:[email protected] ``` 另外还有76个漏洞，详细报告：https://mofeisec.com/jr?p=ica11d
我试着用postman创建用户，没有用不知道为啥。 直接在数据库里插入新用户也不对。 所以可以方便告诉一下admin密码吗？还有创建用户为啥不对，我提交的json如下： ```json { "id": "2", "username": "etoa", "password": "113", "salt": "I love cookies" } ```
