Improper Access Control

Summary

Micronaut Security is a security solution for applications. In versions prior 3.1.2, 3.2.x prior to 3.2.4, 3.3.x prior to 3.3.1, 3.4.x prior to 3.4.2, 3.5.x prior to 3.5.3, 3.6.x prior to 3.6.6, 3.7.x prior to 3.7.4, 3.8.x prior to 3.8.4, 3.9.x prior to 3.9.6, 3.10.x prior to 3.10.2, 3.11.x prior to 3.11.1, and 4.0.x prior to 4.0.0-M8 are vulnerable to "IdTokenClaimsValidator" skips `aud` claim validation if the token is issued by the same identity issuer/provider. Any OIDC setup using Micronaut where multiple OIDC applications exist for the same issuer but token auth are not meant to be shared.