THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-50630 (MEDIUM 6.5) — A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constructing the WWW-Authenticate response header, the 'realm' parameter is concatenated without sanitizing Carriage Return (CR) and Line Feed (LF) characters. If an attacker can control the realm

[NVD] CVE-2026-50630 (MEDIUM 6.5) — A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constructing the WWW-Authenticate response header, the 'realm' parameter is concatenated without sanitizing Carriage Return (CR) and Line Feed (LF) characters. If an attacker can control the realm

lownvdPublished 2026-06-12

CVE-2026-50630 CVSS: 6.5 MEDIUM Published: 2026-06-12T10:16:22.950

A CRLF injection vulnerability exists in the OAuth2 AuthorizationUtils class. When constructing the WWW-Authenticate response header, the 'realm' parameter is concatenated without sanitizing Carriage Return (CR) and Line Feed (LF) characters. If an attacker can control the realm value, they can inject arbitrary HTTP headers or spl

Indicators of compromise

CVE-2026-50630cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-50630