oauth2_proxy_project - MidnightBSD Security Advisories

Advisories for oauth2_proxy_project

CVE-2017-1000069 MEDIUM

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-352,

Products Affected

Vendor	Product	Version
oauth2_proxy_project	oauth2_proxy	2.1

CVE-2017-1000070 MEDIUM

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-601,

Products Affected

Vendor	Product	Version
oauth2_proxy_project	oauth2_proxy	*