Read the docs

oauth2-proxy

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

oauth2-proxy records in CISA KEV

No oauth2-proxy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

13 records in Oauth2 Proxy · all components

TI-2020-08927 CVE-2020-11053 · GHSA-j7px-6hwj-hpjg

Open Redirect in OAuth2 Proxy

Priority LOW 33

In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0079 Published 2020-05-07 Fixed in 5.1.1 CWE-601
Priority LOW 30

OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01595 Published 2021-02-02 Fixed in 7.0.0 CWE-601
TI-2020-04289 CVE-2020-5233 · GHSA-qqxw-m5fj-f7gv

Open Redirect in OAuth2 Proxy

Priority LOW 30

OAuth2 Proxy before 5.0 has an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01304 Published 2020-01-30 Fixed in 5.0.0 CWE-601
TI-2021-04509 CVE-2021-21411 · GHSA-652x-m2gr-hppm

Incorrect authorization in OAuth2-Proxy

Priority LOW 27

OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01069 Published 2021-03-26 Fixed in 7.1.0 CWE-863
TI-2020-03526 CVE-2020-4037 · GHSA-5m6c-jp6f-2vcv

Open Redirect in OAuth2 Proxy

Priority LOW 26

In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00896 Published 2020-06-29 Fixed in 6.0.0 CWE-601
Open these records in search →