CVE-2017-1000069 Cross-site Request Forgery (CSRF)
HighCVSS 8.8
EPSS 0.74%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CSRF in Bitly oauth2_proxy 2.1 during authentication flow
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitly github.com/bitly/oauth2_proxy(Go) | < 2.2.0 | 2.2.0 |
| oauth2 proxy project oauth2 proxy | = 2.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com patch
- web.nvd.nist.gov
- github.com