GHSA-MMF6-6597-3V6M Open Redirect in Spring Security OAuth

🗓️ 13 Jun 2019 20:18:28Reported by GoogleType

osv🔗 osv.dev👁 28 Views

Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18 susceptible to open redirector attack leaking authorization code

Reporter	Title	Published	Views	Family All 21
0day.today	Spring Security OAuth - Open Redirector Vulnerability	18 Jun 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: Remote code execution vulnerability (CVE-2019-11269) affects IBM Spectrum Symphony 7.2.1 and 7.2.0.2	4 Jul 201903:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	13 Apr 202120:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
BDU FSTEC	The vulnerability of the OAuth component of the Java framework for securing Spring-based industrial applications allows a perpetrator to gain unauthorized access to protected information.	2 Mar 202100:00	–	bdu_fstec
CVE	CVE-2019-11269	12 Jun 201914:46	–	cve
Cvelist	CVE-2019-11269 Open Redirector in spring-security-oauth2	12 Jun 201914:46	–	cvelist
Exploit DB	Spring Security OAuth - Open Redirector	17 Jun 201900:00	–	exploitdb
EUVD	EUVD-2019-0551	7 Oct 202500:30	–	euvd
exploitpack	Spring Security OAuth - Open Redirector	17 Jun 201900:00	–	exploitpack

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-11269
pivotal	www.pivotal.io/security/cve-2019-11269
oracle	www.oracle.com/security-alerts/cpujan2021.html
packetstormsecurity	www.packetstormsecurity.com/files/153299/Spring-Security-OAuth-2.3-Open-Redirection.html

14 May 2024 17:13Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.4

EPSS0.08906