PT-2024-40532 · Friendsofsymfony · Friendsofsymfony/Oauth2-Php

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: friendsofsymfony/oauth2-php library (affected versions not specified)

Description: An open redirection issue has been identified in the OAuth authentication process, potentially exposing users to unauthorized redirects. The issue has been addressed by implementing an exact check for the domain and port to ensure more secure redirection.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-XM3X-4PH3-3X9C

Affected Products

Friendsofsymfony/Oauth2-Php

References · 5

• https://osv.dev/vulnerability/GHSA-xm3x-4ph3-3x9c · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony/oauth2-php/2020-03-03-1.yaml · Note
• https://github.com/FriendsOfSymfony/oauth2-php/releases/tag/1.3.0 · Note
• https://github.com/FriendsOfSymfony/oauth2-php · Note
• https://github.com/FriendsOfSymfony/oauth2-php/commit/606b8ea1c3c927c272ac1409116332ad5a2ed94c · Note