Bitly oauth2_proxy Cross-Site Request Forgery Vulnerability

Bitly oauth2proxy is a reverse proxy server that provides authentication with Google, Github and other providers. A cross-site request forgery vulnerability exists in Bitly oauth2proxy version 2.1. A remote attacker can exploit this vulnerability to perform unauthorized operations...

PT-2017-10776

Name of the Vulnerable Software and Affected Versions Bitly oauth2 proxy version 2.1 Description The issue concerns a CSRF problem during the authentication flow in the specified software. Recommendations For version 2.1, update to a newer version that contains a fix for this issue...

PT-2017-10777

Name of the Vulnerable Software and Affected Versions Bitly oauth2 proxy versions 2.1 and earlier Description The issue is related to an open redirect vulnerability that occurs during the start and termination of the 2-legged OAuth flow. This is caused by improper input validation and a violation...