Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/05/24 5:0 p.m.61 views

Redirect URL matching ignores character casing

Impact Before version v0.34.1, the OAuth 2.0 Client's registered redirect URLs and the redirect URL provided at the OAuth2 Authorization Endpoint where compared using strings.ToLower while they should have been compared with a simple string match: 1. Registering a client with allowed redirect URL...

6.1CVSS0.5AI score0.00834EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder