News · via oss-security
CVE-2025-66621: Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigred
Posted by Benoit Tellier on Nov 06 Severity: moderate Affected versions: - Apache James 3.9.0 before 3.9.1 Description: Apache James SASL OAuthBearer/XOAUTH2 prior versions 3.9.1 fails to validate…