Lucene search
Veracode Vulnerability DatabaseVERACODE:4115HistoryMay 03, 2017 - 6:02 a.m.
Cross-site Request Forgery (CSRF)
2017-05-0306:02:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
30.9%
github.com/bitly/oauth2_proxy is vulnerable to cross-site request forgery (CSRF) attacks. The vulnerability is possible due to a flaw in OAuth flow where it uses state parameter as redirect target URL without secure randomness.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/bitly/oauth2_proxy | eq | HEAD | |
| github.com/bitly/oauth2_proxy | le | 2.1 |
Related
osv
osv
CVE-2017-1000069
2017-07-17 13:18:18
Cross-site Request Forgery (CSRF)
2021-12-20 18:04:46
cvelist
cvelist
CVE-2017-1000069
2017-07-13 20:00:00
cve
cve
CVE-2017-1000069
2017-07-17 13:18:18
github
github
Cross-site Request Forgery (CSRF)
2021-12-20 18:04:46
nvd
nvd
CVE-2017-1000069
2017-07-17 13:18:18
prion
prion
Cross site request forgery (csrf)
2017-07-17 13:18:00