| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/h44z/wg-portal | < 2.1.2 | 2.1.2 |
An Open Redirect vulnerability exists in the OAuth authentication flow that allows attackers to redirect users to external malicious websites after authentication. The vulnerability is caused by insufficient validation of the return parameter in the OAuth login initialization endpoint.
The problem was fixed in the latest release, v2.1.2. The docker images for the tag 'latest' built from the master branch also include the fix.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free