Cross-site Request Forgery (CSRF)

ALTO 8.8CVE-2017-1000069 · GHSA-rrm8-32g4-w8m3 · Published 17/07/2017 · updated 17/06/2026

Em resumo

CVE-2017-1000069 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta github.com/bitly/oauth2_proxy, oauth2 proxy (oauth2 proxy project).
Chance de exploração nos próximos 30 dias (EPSS): 0.74%, maior que 54.6% das vulnerabilidades.
Correção: atualize para 2.2.0 ou posterior.

Package	Affected versions	Patched versions
github.com/bitly/oauth2_proxy Go	`< 2.2.0`	`2.2.0`
oauth2 proxy oauth2_proxy_project	`= 2.1`	No fix yet

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

NVD description

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

Running one of these products? Scan your site to see whether it exposes a vulnerable version.