CVE-2019-3778

Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to th...

PT-2019-5715

Name of the Vulnerable Software and Affected Versions Spring Security OAuth versions 2.0 through 2.3.4 Spring Security OAuth version 2.3.5 and later are not affected, but versions prior to 2.3.5 are vulnerable. Description The issue is related to an open redirector attack that can leak an...