OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups.
OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.01595·Published 2021-02-02·Fixed in 7.0.0CWE-601
The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow.
CVSS 3.0MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00996·Published 2017-07-13·Fixed in 2.2.0CWE-601
In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow.
CVSS 3.1MEDIUM 5.4·Network·No auth·User interaction·EPSS 0.00896·Published 2020-06-29·Fixed in 6.0.0CWE-601