CVE-2020-5233

Katalog CVE

CVSS 6.1 · Medium EPSS 1,3%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada oauth2 proxy project oauth2 proxy. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

Rincian

Terbit di NVD

30 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/pusher/oauth2_proxy/commit/a316f8a06f3c0ca2b5fc5fa18a91781b313607b2 patch · advisory pihak ketiga
• https://github.com/pusher/oauth2_proxy/security/advisories/GHSA-qqxw-m5fj-f7gv exploit · patch · advisory pihak ketiga
• https://github.com/pusher/oauth2_proxy/releases/tag/v5.0.0 release notes · advisory pihak ketiga