CVE-2019-3778

🗓️ 07 Mar 2019 19:00:00Reported by MendType

mend🔗 www.mend.io👁 1 Views

Open redirector in Spring Security OAuth AuthorizationEndpoint leaks authorization codes.

Reporter	Title	Published	Views	Family All 23
zdt	Spring Security OAuth - Open Redirector Vulnerability	18 Jun 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	13 Apr 202120:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: Remote code execution vulnerability (CVE-2019-3778) affects IBM Spectrum Symphony 7.2.0.2 and 7.2.1	18 Jun 201908:15	–	ibm
BDU FSTEC	The vulnerability of the OAuth component in the Java framework for securing Spring-based industrial applications allows attackers to escalate their privileges and gain unauthorized access to protected information.	16 Feb 202100:00	–	bdu_fstec
Circl	CVE-2019-3778	29 Jun 202218:43	–	circl
CVE	CVE-2019-3778	7 Mar 201919:00	–	cve
Cvelist	CVE-2019-3778 Open Redirect in spring-security-oauth2	7 Mar 201919:00	–	cvelist
Exploit DB	Spring Security OAuth - Open Redirector	17 Jun 201900:00	–	exploitdb
exploitpack	Spring Security OAuth - Open Redirector	17 Jun 201900:00	–	exploitpack

Vulners

Node

OR

pivotal_software spring_security_oauthRange2.1.0.RELEASE–2.1.4.RELEASE

pivotal_software spring_security_oauthRange2.3.0.RELEASE–2.3.5.RELEASE

pivotal_software spring_security_oauthRange1.0.0.M4–2.0.17.RELEASE

pivotal_software spring_security_oauthRange2.2.0.RELEASE–2.2.4.RELEASE

pivotal_software spring_security_oauthRange1.0.0.M1–2.0.17.RELEASE

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/153299/Spring-Security-OAuth-2.3-Open-Redirection.html
github	www.github.com/spring-attic/spring-security-oauth
securityfocus	www.securityfocus.com/bid/107153
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-3778
pivotal	www.pivotal.io/security/cve-2019-3778
oracle	www.oracle.com/security-alerts/cpujan2021.html
web	www.web.archive.org/web/20200227084837/http://www.securityfocus.com/bid/107153

06 Oct 2026 02:38Current

CVSS 3.16.5

CVSS 46.9

CVSS 26.4

EPSS0.16596

Spring Security OAuth AuthorizationEndpoint open redirector authorization code DefaultRedirectResolver