Oauth2 Proxy Project

Oauth2 Proxy

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2025-54576

Exploit
  • EPSS 0.23%
  • Veröffentlicht 30.07.2025 19:41:04
  • Zuletzt bearbeitet 10.09.2025 14:36:50

OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions 7.10.0 and below, oauth2-proxy deployments are vulnerable when...

5.5

CVE-2021-21411

  • EPSS 0.22%
  • Veröffentlicht 26.03.2021 21:15:13
  • Zuletzt bearbeitet 21.11.2024 05:48:18

OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `--gitlab-group` flag for group-based authorization in the GitLab provider stopped working in the v7.0.0 release. Regardless of the ...

6.1

CVE-2021-21291

Exploit
  • EPSS 0.24%
  • Veröffentlicht 02.02.2021 19:15:14
  • Zuletzt bearbeitet 21.11.2024 05:47:56

OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group. In OAuth2 Proxy before version 7.0.0, for users that use the...

5.8

CVE-2020-4037

  • EPSS 0.38%
  • Veröffentlicht 29.06.2020 20:15:10
  • Zuletzt bearbeitet 21.11.2024 05:32:11

In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was tryi...

6.1

CVE-2020-11053

  • EPSS 0.23%
  • Veröffentlicht 07.05.2020 21:15:11
  • Zuletzt bearbeitet 21.11.2024 04:56:41

In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user w...

6.1

CVE-2020-5233

Exploit
  • EPSS 0.29%
  • Veröffentlicht 30.01.2020 19:15:11
  • Zuletzt bearbeitet 21.11.2024 05:33:43

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

8.8

CVE-2017-1000069

  • EPSS 0.09%
  • Veröffentlicht 17.07.2017 13:18:18
  • Zuletzt bearbeitet 20.04.2025 01:37:25

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

6.1

CVE-2017-1000070

  • EPSS 0.18%
  • Veröffentlicht 17.07.2017 13:18:18
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819