CVE-2022-29228

A flaw was found in Envoy. The OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT in newer versions and corrupts memory on earlier versions...

CVE-2022-29226

A flaw was found in Envoy. The OAuth filter does not include an implementation for validating access tokens, allowing remote attackers to bypass authentication to Envoy by providing any token value. Mitigation There is no known mitigation for this flaw...

CVE-2020-26877

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...

CVE-2020-26877

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...

Authorization

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...

CVE-2020-26877

CVE-2020-26877 affects ApiFest OAuth 2.0 Server 0.3.1 and is caused by not validating the redirect_uri per RFC 6749, enabling an open redirect where an attacker-controlled redirect_uri can receive an authorization code. This is described as an open redirector vulnerability and is related to CVE-2...

CVE-2020-26877

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...

OAuth Single Sign On < 6.22.6 - Authentication Bypass

The plugin doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address. PoC POST / HTTP/1.1 Accept: / Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type:...

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 6.22.5 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by Lana Codes in WordPress OAuth Single Sign On – SSO OAuth Client plugin versions = 6.22.5. Solution Update the WordPress OAuth Single Sign On – SSO OAuth Client plugin to the latest available version at least 6.22.6...

Grafana -- OAuth Account Takeover

Grafana Labs reports: It is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP to take over an existing Grafana account under some conditions...

OAuth Single Sign On < 6.22.6 - Authentication Bypass

The plugin doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address. POST / HTTP/1.1 Accept: / Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type:...

OAuth 2.0 client for SSO < 1.11.4 - Authenticated Bypass

The plugin allows attackers to login as any user by just knowing their email address PoC POST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded [email protected]...

OAuth 2.0 client for SSO < 1.11.4 - Authenticated Bypass

The plugin allows attackers to login as any user by just knowing their email address POST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded option=mooauth&[email protected]...

Malicious code in hello-oauth-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3dba086e4539ba830b04b5d911a532cb91957fd5cbdf6a5e6793e6d1953d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3597 Malicious code in hello-oauth-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3dba086e4539ba830b04b5d911a532cb91957fd5cbdf6a5e6793e6d1953d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9a2c5c46b8e8654ac9432c80b3ce72083cda20ffada8ef7098636fd56eae3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6849 Malicious code in usaa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4881d055d1bbdbb5e052049f12b99e7672524d2efa4d9e1bb490b6da322f1771 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6805 Malicious code in uphold-authorization-code-oauth-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f9fcf4a7641090bcac961c4bf198b220a96562cb48390c5bf3bc8ed1053de38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6807 Malicious code in uphold-client-credentials-oauth-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a6ff91dfe2ca9fdd4154417d7e9abc79b3e51e42edf5011f0a67c40ba63f2a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uphold-authorization-code-oauth-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f9fcf4a7641090bcac961c4bf198b220a96562cb48390c5bf3bc8ed1053de38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...