CVE-2019-11269
MEDIUM
Published 2019-06-12T14:46:18.601170Z
Actions:
CVSS Score
V3.0
4.2
/10
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
Base Score Metrics
Exploitability: N/A
Impact: N/A
EPSS Score
v2023.03.01
0.002
probability
of exploitation in the wild
There is a 0.2% chance that this vulnerability will be exploited in the wild within the next 30 days.
Updated: 2025-01-25
Exploit Probability
Percentile: 0.538
Higher than 53.8% of all CVEs
Attack Vector Metrics
Impact Metrics
Description
Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the redirect_uri parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
References
Published: 2019-06-12T14:46:18.601170Z
Last Modified: 2024-09-16T23:11:41.537Z
Copied to clipboard!