Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Oauth2 Proxy ProjectOauth2 Proxy*

3 matches found

CVE
CVE•added 2020/05/07 9:15 p.m.•81 views

CVE-2020-11053

In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was trying to access. This redirect URL is checked...

7.1CVSS6.2AI score0.0023EPSS
CVE
CVE•added 2020/01/30 7:15 p.m.•75 views

CVE-2020-5233

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

6.1CVSS5.9AI score0.00287EPSS
CVE
CVE•added 2020/06/29 8:15 p.m.•55 views

CVE-2020-4037

In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was trying to access. This redirect URL is checked within...

5.8CVSS4.8AI score0.00321EPSS