~ / search / GHSA-jm34-xm8m-w958

GHSA-jm34-xm8m-w958

Open Redirect in oauth2_proxy

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-1000070

Packages

EcosystemPackageAffectedFixed in
Go github.com/bitly/oauth2_proxy < 2.2.0 2.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819

References

External links from the advisory. They lead to third-party sites.