{"id":"BIT-oauth2-proxy-2020-5233","summary":"Open Redirect in OAuth2 Proxy","details":"OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.","aliases":["CVE-2020-5233","GHSA-qqxw-m5fj-f7gv"],"modified":"2026-09-08T08:48:10.898100518Z","published":"2024-03-06T10:59:29.907Z","database_specific":{"cpes":["cpe:2.3:a:oauth2_proxy_project:oauth2_proxy:*:*:*:*:*:*:*:*"],"severity":"Medium"},"references":[{"type":"ADVISORY","url":"https://github.com/pusher/oauth2_proxy/commit/a316f8a06f3c0ca2b5fc5fa18a91781b313607b2"},{"type":"ADVISORY","url":"https://github.com/pusher/oauth2_proxy/releases/tag/v5.0.0"},{"type":"ADVISORY","url":"https://github.com/pusher/oauth2_proxy/security/advisories/GHSA-qqxw-m5fj-f7gv"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5233"}],"affected":[{"package":{"name":"oauth2-proxy","ecosystem":"Bitnami","purl":"pkg:bitnami/oauth2-proxy"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.0.0"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/oauth2-proxy/BIT-oauth2-proxy-2020-5233.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}],"schema_version":"1.9.0"}