CVE-2020-5233 in OAuth2 Proxy

Tóm tắt

Bởi MITRE

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• chịu trách nhiệm: GitHub, Inc.
• Đặt trước: 02/01/2020
• Kiểm duyệt: được chấp nhận
• mục: VDB-149583
• CPE: sẵn sàng
• CWE: CWE-601 (Đã xác nhận)
• CVSS: 5.9 (NVD)
• EPSS: 0.00287
• KEV: không
• Các hoạt động: rất thấp
• ngành: Telecommunication, Insurance, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-5233
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-5233
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-5233/