oauth2-proxy vulnerabilities (Bitnami)
13 vulnerabilities.
-
oauth2-proxyBitnami OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex 8.2 High -
oauth2-proxyBitnami OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims 6.8 Medium -
oauth2-proxyBitnami OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set 9.3 Critical -
oauth2-proxyBitnami OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing 9.1 Critical -
oauth2-proxyBitnami OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode 9.1 Critical -
oauth2-proxyBitnami OAuth2 Proxy: Session cookie not cleared when rendering sign-in page 3.5 Low -
oauth2-proxyBitnami OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation 8.5 High -
oauth2-proxyBitnami OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion 9.1 Critical -
oauth2-proxyBitnami Incorrect authorization in OAuth2-Proxy 5.5 Medium -
oauth2-proxyBitnami Subdomain checking of whitelisted domains could allow unintended redirects 4.7 Medium -
oauth2-proxyBitnami Open Redirect in OAuth2 Proxy 4.3 Medium -
oauth2-proxyBitnami Open Redirect in OAuth2 Proxy 7.1 High -
oauth2-proxyBitnami Open Redirect in OAuth2 Proxy 5.9 Medium