Количество 3
Количество 3
CVE-2026-59355
In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri, which can result in an open redirect to an attacker-controlled site.
CVE-2026-59355
In versions of Spring Authorization Server 1.5.0 through 1.5.7, the au ...
GHSA-mhfq-9687-g8m3
In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri, which can result in an open redirect to an attacker-controlled site.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-59355 In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri, which can result in an open redirect to an attacker-controlled site. | CVSS3: 6.1 | 0% Низкий | 5 дней назад |
| CVE-2026-59355 In versions of Spring Authorization Server 1.5.0 through 1.5.7, the au ... | CVSS3: 6.1 | 0% Низкий | 5 дней назад |
| GHSA-mhfq-9687-g8m3 In versions of Spring Authorization Server 1.5.0 through 1.5.7, the authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a request containing an invalid request_uri paired with an unvalidated redirect_uri, which can result in an open redirect to an attacker-controlled site. | CVSS3: 6.1 | 0% Низкий | 5 дней назад |
Уязвимостей на страницу