| Package | Affected versions | Patched versions |
|---|---|---|
| client connector | < 1.10.1< 1.10.2< 1.4< 1.9.3< 3.7< 3.9 | 1.10.11.10.21.41.9.33.73.9 |
A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free