A vulnerability was found in pac4j up to 3.x. It has been classified as very critical. This affects the function
UserProfile
of the component Base64 Encoding Handler. The manipulation leads to deserialization.
This vulnerability is uniquely identified as CVE-2023-25581. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.