Open Redirection

spring-security-oauth2 is vulnerable to open redirection. A lack of validation on the redirect_uri parameter allows an attacker to manipulate the redirect URI by sending a malicious request to the authorization endpoint using the authorization code grant type and cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code.