HighCVSS 8.8
EPSS 0.74%
CSRF in Bitly oauth2_proxy 2.1 during authentication flow
Product
bitly github.com/bitly/oauth2_proxy vulnerabilities
2 published CVES affecting bitly github.com/bitly/oauth2_proxy, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest bitly github.com/bitly/oauth2_proxy CVEs
Newest publication first
-
-
MediumCVSS 6.1 EPSS 1.00%
The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.