GHSA-jm34-xm8m-w958MediumCVSS 6.1

Open Redirect in oauth2_proxy

Published
December 20, 2021
Last Modified
September 27, 2023

🔗 CVE IDs covered (1)

CVE-2017-1000070 →

📋 Description

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819

🎯 Affected products1

  • go/github.com/bitly/oauth2_proxy:< 2.2.0

🔗 References (7)