XXE vulnerability in OpenID authentication

• Type: Bug
• Status: Closed
• Resolution: Duplicate
• Affects Version/s: 6.2.3 CE GA4
• Fix Version/s: 6.0.X EE, 6.1.X EE, 6.2.X EE
• Component/s: Security Vulnerability
• Labels:
  • cst-patch

The version of openid4java.jar that is currently used by the portal vulnerable to XXE attack.