CVE-2019-11269: Open Redirect in Spring Security OAuth
Summary
CVE-2019-11269: Open Redirect in Spring Security OAuth. Affects org.springframework.security.oauth:spring-security-oauth across 4 version ranges.
>= 2.0.0.RELEASE, < 2.0.18.RELEASE
>= 2.1.0.RELEASE, < 2.1.5.RELEASE
>= 2.2.0.RELEASE, < 2.2.5.RELEASE
>= 2.3.0.RELEASE, < 2.3.6.RELEASE
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Spring Security OAuth package is a widely used library for implementing OAuth 2.0 authentication and authorization in Java applications. It provides various features and components to secure the OAuth flow. However, versions 2.0 to 2.3.6 of the package are susceptible to an open redirect vulnerability.
Vulnerability Detail
The open redirect vulnerability in Spring Security OAuth allows a malicious user or attacker to manipulate the redirection URI during the authorization process. By crafting a request to the authorization endpoint using the authorization code grant type, the attacker can specify a manipulated redirect_uri parameter. This can lead to the authorization server redirecting the resource owner user-agent to a URI controlled by the attacker, leaking the authorization code in the process.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 2.0.0.RELEASE, < 2.0.18.RELEASE2.0.18.RELEASE -
>= 2.1.0.RELEASE, < 2.1.5.RELEASE2.1.5.RELEASE -
>= 2.2.0.RELEASE, < 2.2.5.RELEASE2.2.5.RELEASE -
>= 2.3.0.RELEASE, < 2.3.6.RELEASE2.3.6.RELEASE
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The open redirect vulnerability in Spring Security OAuth can lead to the leakage of authorization codes, potentially compromising the security of the application. It is crucial to upgrade to the latest version of the package and validate redirect URIs to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.springframework.security.oauth:spring-security-oauth →
FAQ
This vulnerability can allow an attacker to steal authorization codes and potentially gain unauthorized access to protected resources.
Versions 2.0 to 2.3.6 of Spring Security OAuth are affected. Older unsupported versions may also be vulnerable.
Yes, the CVSS score for this vulnerability is 5.4.
There are no known exploits available at the moment.
You can find more information about this vulnerability in the GitHub Advisory Database.
Related vulnerabilities
Recent vulnerabilities recorded for org.springframework.security.oauth:spring-security-oauth.
