CVE-2020-5233

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0...

CVE-2020-5233

CVE-2020-5233 affects the OAuth2 Proxy project (github.com/pusher/oauth2_proxy) prior to version 5.0, where an open redirect vulnerability exists in the redirect handling. The vulnerable component is the redirect/redirect URL validation path, enabling an attacker to silently harvest authenticatio...

CVE-2020-5233 Open Redirect in OAuth2 Proxy

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0...

CVE-2020-5233: URL Redirection to Untrusted Site

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0...

PT-2020-18329 · Oauth2 Proxy · Oauth2 Proxy

Name of the Vulnerable Software and Affected Versions: oauth2 proxy versions prior to 5.0 Description: An open redirect vulnerability has been found in oauth2 proxy. This issue could allow an attacker to silently harvest authentication tokens. For example, an attacker could use a URL like...

Bitly oauth2_proxy Cross-Site Request Forgery Vulnerability

Bitly oauth2proxy is a reverse proxy server that provides authentication with Google, Github and other providers. A cross-site request forgery vulnerability exists in Bitly oauth2proxy version 2.1. A remote attacker can exploit this vulnerability to perform unauthorized operations...

PT-2017-10776

Name of the Vulnerable Software and Affected Versions Bitly oauth2 proxy version 2.1 Description The issue concerns a CSRF problem during the authentication flow in the specified software. Recommendations For version 2.1, update to a newer version that contains a fix for this issue...

PT-2017-10777

Name of the Vulnerable Software and Affected Versions Bitly oauth2 proxy versions 2.1 and earlier Description The issue is related to an open redirect vulnerability that occurs during the start and termination of the 2-legged OAuth flow. This is caused by improper input validation and a violation...