Lucene search
Veracode Vulnerability DatabaseVERACODE:25160HistoryMay 04, 2020 - 6:32 a.m.
Authentication Bypass
2020-05-0406:32:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
47.2%
github.com/sourcegraph/sourcegraph is vulnerable to authentication bypass. The vulnerability exists as it improper validates the value of u.Path, causing the SafeRedirectURL method in cmd/frontend/auth/redirect.go to redirect incorrectly.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/sourcegraph/sourcegraph | le | v3.15.0 |
References
github.com/sourcegraph/sourcegraph/blob/master/CHANGELOG.md
github.com/sourcegraph/sourcegraph/commit/c0f48172e815c7f66471a38f0a06d1fc32a77a64
github.com/sourcegraph/sourcegraph/compare/v3.15.0...v3.15.1
github.com/sourcegraph/sourcegraph/pull/10167
securitylab.github.com/advisories/GHSL-2020-085-sourcegraph
Related
osv
osv
CVE-2020-12283
2020-04-30 05:15:11
Open redirect vulnerability in Sourcegraph
2021-12-20 18:12:47
github
github
Open redirect vulnerability in Sourcegraph
2021-12-20 18:12:47
cve
cve
CVE-2020-12283
2020-04-30 05:15:11
prion
prion
Input validation
2020-04-30 05:15:00
cvelist
cvelist
CVE-2020-12283
2020-04-30 04:07:29
nvd
nvd
CVE-2020-12283
2020-04-30 05:15:11