GO-2022-0783 JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium

JWT leak via Open Redirect in Programmatic access in github.com/pomerium/pomerium...

Authorization Bypass

github.com/pomerium/pomerium is vulnerable to Improper Authorization. The vulnerability exists due to crafted requests which allows an attacker to bypass authorization...

Open Redirect

github.com/pomerium/pomerium is vulnerable to open redirect. When using programmatic login, it does not restrict a signed login URL to redirect a victim to the attacker’s site and eventually can cause a JWT leakage...