Lucene search
Veracode Vulnerability DatabaseVERACODE:22419HistoryJan 31, 2020 - 6:13 a.m.
Open Redirection
2020-01-3106:13:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.001
Percentile
45.1%
github.com/pusher/oauth2_proxy is vulnerable to open redirection. Lack of validation in the redirect_url parameter allows an attacker to redirect a user to a malicious website and potentially steal the user’s authentication tokens.
Related
osv
osv
The pattern '/\domain.com' is not disallowed when redirecting, allowing for open redirect
2021-12-20 18:02:38
BIT-oauth2-proxy-2020-5233
2024-03-06 10:59:29
CVE-2020-5233
2020-01-30 19:15:11
cvelist
cvelist
CVE-2020-5233 Open Redirect in OAuth2 Proxy
2020-01-30 17:45:17
nvd
nvd
CVE-2020-5233
2020-01-30 19:15:11
cve
cve
CVE-2020-5233
2020-01-30 19:15:11
github
github
prion
prion
Open redirect
2020-01-30 19:15:00