CVE-2022-3145

2023-01-1200:00:00

Okta

www.cve.org

open redirect

okta oidc

arbitrary url

AI Score

Confidence

High

EPSS

0.001

Percentile

31.2%

JSON

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.

CNA Affected

[
  {
    "vendor": "Okta",
    "product": "Okta OIDC Middleware",
    "versions": [
      {
        "version": "prior to 5.0.0",
        "status": "affected"
      }
    ]
  }
]

References

github.com/okta/okta-oidc-middleware/security/advisories/GHSA-58h4-9m7m-j9m4