CVE-2023-25581 | pac4j up to 3.x Base64 Encoding UserProfile deserialization (GHSL-2022-085)

A vulnerability was found in pac4j up to 3.x. It has been classified as very critical. This affects the function UserProfile of the component Base64 Encoding Handler. The manipulation leads to deserialization.

This vulnerability is uniquely identified as CVE-2023-25581. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.