PT-2020-12514 · Oauth2 Proxy · Oauth2 Proxy

Iamnoooob + 2 · Published 2020-05-07 · Updated 2024-03-06 · CVE-2020-11053

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OAuth2 Proxy versions prior to 5.1.1

Description The issue is related to an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This redirect URL is checked within the proxy and validated before redirecting the user to prevent malicious actors providing redirects to potentially harmful sites. However, by crafting a redirect URL with HTML encoded whitespace characters, the validation could be bypassed and allow a redirect to any URL provided.

Recommendations For OAuth2 Proxy versions prior to 5.1.1, update to version 5.1.1 to resolve the issue. As a temporary workaround, consider validating redirect URLs more strictly to prevent bypassing the validation. Restrict access to the IsValidRedirect function to minimize the risk of exploitation. Avoid using HTML encoded whitespace characters in redirect URLs until the issue is resolved.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BIT-OAUTH2-PROXY-2020-11053

CVE-2020-11053

GHSA-J7PX-6HWJ-HPJG

Affected Products

Oauth2 Proxy

References · 7

• https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-j7px-6hwj-hpjg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11053 · Security Note
• https://osv.dev/vulnerability/BIT-oauth2-proxy-2020-11053 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11053 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j7px-6hwj-hpjg · Vendor Advisory
• https://github.com/oauth2-proxy/oauth2-proxy/commit/0d5fa211df8ef2449347a56b22c779eb8d894c43 · Note
• https://t.me/cvenotify/3656 · Telegram Post