GHSA-xm3x-4ph3-3x9c
friendsofsymfony/oauth2-php open redirection in oauth
An open redirection vulnerability has been identified in the friendsofsymfony/oauth2-php library, which could potentially expose users to unauthorized redirects during the OAuth authentication process. This vulnerability has been addressed by implementing an exact check for the domain and port, ensuring more secure redirection.
What each source reports
GitHub AdvisoriesNo score
friendsofsymfony/oauth2-php open redirection in oauth
An open redirection vulnerability has been identified in the friendsofsymfony/oauth2-php library, which could potentially expose users to unauthorized redirects during the OAuth authentication process. This vulnerability has been addressed by implementing an exact check for the domain and port, ensuring more secure redirection.
- Record
GHSA-xm3x-4ph3-3x9c- Updated
- 2026-11-02
OSVNo score
friendsofsymfony/oauth2-php open redirection in oauth
An open redirection vulnerability has been identified in the friendsofsymfony/oauth2-php library, which could potentially expose users to unauthorized redirects during the OAuth authentication process. This vulnerability has been addressed by implementing an exact check for the domain and port, ensuring more secure redirection.
- Record
GHSA-xm3x-4ph3-3x9c- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
friendsofsymfony/oauth2-phpPackagist | before 1.3.0 | 1.3.0 |
friendsofsymfony/oauth2-phpPackagist | before 1.3.0, plus listed versions 1.0.01.0.11.0.21.0.31.0.4 Show 11 moreShow less1.0.51.0.61.0.71.0.81.0.91.1.01.1.11.2.01.2.11.2.21.2.3 | 1.3.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-xm3x-4ph3-3x9c is a vulnerability with no CVSS score yet in friendsofsymfony/oauth2-php, published May 15, 2024. No source lists public exploit code. Fixed in friendsofsymfony/oauth2-php 1.3.0.
References
github.com/FriendsOfSymfony/oauth2-php/commit/606b8ea1c3c927c272ac1409116332ad5a2ed94c