Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38862
HistoryJan 13, 2023 - 3:30 a.m.

Open Redirect

2023-01-1303:30:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
open redirect
oidc-middleware
ensureauthenticated
request urls
attacker
malicious urls

EPSS

0.001

Percentile

31.2%

oidc-middleware is vulnerable to open redirect. The vulnerability exists because the ensureAuthenticated function of oidcUtil.js does not properly validate the request URLs, allowing an attacker to redirect the user to malicious URLs.

EPSS

0.001

Percentile

31.2%

Related for VERACODE:38862