Cross-site Request Forgery (CSRF)

ALTO 8.8CVE-2017-1000069 · GHSA-rrm8-32g4-w8m3 · Published 17/07/2017 · updated 17/06/2026

In breve

CVE-2017-1000069 è una vulnerabilità ALTO (CVSS 8.8) che riguarda github.com/bitly/oauth2_proxy, oauth2 proxy (oauth2 proxy project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.74%, superiore al 54.6% delle vulnerabilità.
Correzione: aggiornare a 2.2.0 o successiva.

Package	Affected versions	Patched versions
github.com/bitly/oauth2_proxy Go	`< 2.2.0`	`2.2.0`
oauth2 proxy oauth2_proxy_project	`= 2.1`	No fix yet

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

NVD description

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

Running one of these products? Scan your site to see whether it exposes a vulnerable version.