Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2021/05/24 5:00 p.m.•122 views

OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses

Impact fosite400 released as v0.30.2 introduced a new feature for handling redirect URLs pointing to loopback interfaces rfc8252section-7.3. As part of that change new behavior was introduced which failed to respect the redirect URL's only for loopback interfaces! query parameters 1. Registering ...

6.1CVSS0.9AI score0.008EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2021/05/24 5:00 p.m.•30 views

GHSA-RFQ3-W54C-F9Q5 OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses

Impact fosite400 released as v0.30.2 introduced a new feature for handling redirect URLs pointing to loopback interfaces rfc8252section-7.3. As part of that change new behavior was introduced which failed to respect the redirect URL's only for loopback interfaces! query parameters 1. Registering ...

6.1CVSS5.6AI score0.008EPSS
SaveExploits0References5
Rows per page
Query Builder