2 matches found
CVE-2026-67345
MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedirectResolver.hostMatches that allows remote attackers to hijack OAuth 2.0 authorization codes by supplying a crafted redirecturi whose hostname suffix matches a registered...
8.5CVSS0.00565EPSS
SaveExploits0References3
CVE-2026-67345: Permissive List of Allowed Inputs
MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedirectResolver.hostMatches that allows remote attackers to hijack OAuth 2.0 authorization codes by supplying a crafted redirecturi whose hostname suffix matches a registered...
8.5CVSS5.9AI score0.00565EPSS
SaveExploits0References2
20