GHSA-77RV-6VFW-X4GC spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability

🗓️ 14 Mar 2019 15:39:30Reported by GoogleType

osv🔗 osv.dev👁 26 Views

Spring Security OAuth open redirect vulnerability in versions 2.3 to 2.3.5, 2.2 to 2.2.4, 2.1 to 2.1.4, and 2.0 to 2.0.17 allows crafted redirect URI leading to an authorization code leak

Reporter	Title	Published	Views	Family All 25
0day.today	Spring Security OAuth - Open Redirector Vulnerability	18 Jun 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	13 Apr 202120:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: Remote code execution vulnerability (CVE-2019-3778) affects IBM Spectrum Symphony 7.2.0.2 and 7.2.1	18 Jun 201908:15	–	ibm
BDU FSTEC	The vulnerability of the OAuth component in the Java framework for securing Spring-based industrial applications allows attackers to escalate their privileges and gain unauthorized access to protected information.	16 Feb 202100:00	–	bdu_fstec
Circl	CVE-2019-3778	29 Jun 202218:43	–	circl
CVE	CVE-2019-3778	7 Mar 201919:00	–	cve
Cvelist	CVE-2019-3778 Open Redirect in spring-security-oauth2	7 Mar 201919:00	–	cvelist
Exploit DB	Spring Security OAuth - Open Redirector	17 Jun 201900:00	–	exploitdb
exploitpack	Spring Security OAuth - Open Redirector	17 Jun 201900:00	–	exploitpack

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-3778
github	www.github.com/spring-attic/spring-security-oauth
pivotal	www.pivotal.io/security/cve-2019-3778
web	www.web.archive.org/web/20200227084837/http://www.securityfocus.com/bid/107153
oracle	www.oracle.com/security-alerts/cpujan2021.html
packetstormsecurity	www.packetstormsecurity.com/files/153299/Spring-Security-OAuth-2.3-Open-Redirection.html

16 Feb 2024 08:19Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.15621