Advisories for Maven/Org.apache.cxf/Cxf-Rt-Rs-Security-Oauth2 package

Instead of sending a JWT token as a request parameter, the spec also supports specifying a URI from which to retrieve a JWT token from via the request_uri parameter. CXF was not validating the request_uri parameter and was making a REST request to the parameter in the request to retrieve a token.