Lucene search
Veracode Vulnerability DatabaseVERACODE:27524HistoryOct 05, 2020 - 2:00 a.m.
Insecure Redirect Validation
2020-10-0502:00:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
github
vulnerability
redirect
EPSS
0.001
Percentile
19.4%
github.com/ory/fosite suffers from insecure redirect validation. The vulnerability exists as it is possible to override the registered redirect URL, with custom URL query parameters, through an OAuth flow that requests for a redirect URL to the loopback adapter.
Related
cve
cve
CVE-2020-15233
2020-10-02 21:15:12
osv
osv
OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses
2021-05-24 17:00:12
CVE-2020-15233
2020-10-02 21:15:12
nvd
nvd
CVE-2020-15233
2020-10-02 21:15:12
github
github
prion
prion
Design/Logic Flaw
2020-10-02 21:15:00
cvelist
cvelist