oauth2 proxy project kayıtları
oauth2 proxy project üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')5
- CWE-290 Authentication Bypass by Spoofing3
- CWE-863 Incorrect Authorization2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-384 Session Fixation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2025-54576İstismar yok | OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusionoauth2 proxy project · oauth2 proxy · CWE-290 | Kritik9,1 | — | %1,2 | 30 Tem 2025 |
36İzleyin | CVE-2026-40575İstismar yok | OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofingoauth2 proxy project · oauth2 proxy · CWE-290 | Kritik9,1 | — | %0,4 | 21 Nis 2026 |
36İzleyin | CVE-2026-34457İstismar yok | OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Modeoauth2 proxy project · oauth2 proxy · CWE-290 | Kritik9,1 | — | %0,4 | 14 Nis 2026 |
35İzleyin | CVE-2017-1000069İstismar yok | CSRF in Bitly oauth2_proxy 2.1 during authentication flowoauth2 proxy project · oauth2 proxy · CWE-352 | Yüksek8,8 | — | %0,7 | 17 Tem 2017 |
32İzleyin | CVE-2026-41059İstismar yok | OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regexoauth2 proxy project · oauth2 proxy · CWE-288 | Yüksek8,2 | — | %0,2 | 21 Nis 2026 |
27İzleyin | CVE-2026-40574İstismar yok | OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claimsoauth2 proxy project · oauth2 proxy · CWE-863 | Orta6,8 | — | %0,2 | 21 Nis 2026 |
24İzleyin | CVE-2021-21291İstismar yok | Subdomain checking of whitelisted domains could allow unintended redirectsoauth2 proxy project · oauth2 proxy · CWE-601 | Orta6,1 | — | %1,5 | 2 Şub 2021 |
24İzleyin | CVE-2020-5233İstismar yok | Open Redirect in OAuth2 Proxyoauth2 proxy project · oauth2 proxy · CWE-601 | Orta6,1 | — | %1,3 | 30 Oca 2020 |
24İzleyin | CVE-2017-1000070İstismar yok | The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-loauth2 proxy project · oauth2 proxy · CWE-601 | Orta6,1 | — | %0,9 | 17 Tem 2017 |
24İzleyin | CVE-2020-11053İstismar yok | Open Redirect in OAuth2 Proxyoauth2 proxy project · oauth2 proxy · CWE-601 | Orta6,1 | — | %0,7 | 7 May 2020 |
22İzleyin | CVE-2021-21411İstismar yok | Incorrect authorization in OAuth2-Proxyoauth2 proxy project · oauth2 proxy · CWE-863 | Orta5,5 | — | %1,0 | 26 Mar 2021 |
21İzleyin | CVE-2020-4037İstismar yok | Open Redirect in OAuth2 Proxyoauth2 proxy project · oauth2 proxy · CWE-601 | Orta5,4 | — | %0,8 | 29 Haz 2020 |
14İzleyin | CVE-2026-34454İstismar yok | OAuth2 Proxy: Session cookie not cleared when rendering sign-in pageoauth2 proxy project · oauth2 proxy · CWE-384 | Düşük3,5 | — | %0,1 | 14 Nis 2026 |
- CVE-2025-5457636İzleyin
OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion
KritikCVSS 9,1İstismar yokEPSS %1oauth2 proxy project · oauth2 proxy30 Tem 2025
- CVE-2026-4057536İzleyin
OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing
KritikCVSS 9,1İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy21 Nis 2026
- CVE-2026-3445736İzleyin
OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode
KritikCVSS 9,1İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy14 Nis 2026
- CVE-2017-100006935İzleyin
CSRF in Bitly oauth2_proxy 2.1 during authentication flow
YüksekCVSS 8,8İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy17 Tem 2017
- CVE-2026-4105932İzleyin
OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex
YüksekCVSS 8,2İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy21 Nis 2026
- CVE-2026-4057427İzleyin
OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims
OrtaCVSS 6,8İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy21 Nis 2026
- CVE-2021-2129124İzleyin
Subdomain checking of whitelisted domains could allow unintended redirects
OrtaCVSS 6,1İstismar yokEPSS %1oauth2 proxy project · oauth2 proxy2 Şub 2021
- CVE-2020-523324İzleyin
Open Redirect in OAuth2 Proxy
OrtaCVSS 6,1İstismar yokEPSS %1oauth2 proxy project · oauth2 proxy30 Oca 2020
- CVE-2017-100007024İzleyin
The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-l
OrtaCVSS 6,1İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy17 Tem 2017
- CVE-2020-1105324İzleyin
Open Redirect in OAuth2 Proxy
OrtaCVSS 6,1İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy7 May 2020
- CVE-2021-2141122İzleyin
Incorrect authorization in OAuth2-Proxy
OrtaCVSS 5,5İstismar yokEPSS %1oauth2 proxy project · oauth2 proxy26 Mar 2021
- CVE-2020-403721İzleyin
Open Redirect in OAuth2 Proxy
OrtaCVSS 5,4İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy29 Haz 2020
- CVE-2026-3445414İzleyin
OAuth2 Proxy: Session cookie not cleared when rendering sign-in page
DüşükCVSS 3,5İstismar yokEPSS %0oauth2 proxy project · oauth2 proxy14 Nis 2026