p PatchFirst

GHSA-xm3x-4ph3-3x9c

GHSA-xm3x-4ph3-3x9c · friendsofsymfony/oauth2-php open redirection in oauth

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An open redirection vulnerability has been identified in the friendsofsymfony/oauth2-php library, which could potentially expose users to unauthorized redirects during the OAuth authentication process. This vulnerability has been addressed by implementing an exact check for the domain and port, ensuring more secure redirection.

Fix available

Published
Updated

Stack: php

Affected products and versions

  • friendsofsymfony/oauth2-php Packagist

    Versions
    • 1.0.0
    • 1.0.1
    • 1.0.2
    • 1.0.3
    • 1.0.4
    • 1.0.5
    • 1.0.6
    • 1.0.7
    • 1.0.8
    • 1.0.9
    • 1.1.0
    • 1.1.1
    • 1.2.0
    • 1.2.1
    • 1.2.2
    • 1.2.3
    Affected ranges
    • ECOSYSTEM: < 1.3.0

    Update to 1.3.0

Original sources

Check your server →