Owncloud Oauth2 vulnerabilities

1 vulnerability

Known vulnerabilities in Owncloud Oauth2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2023-49104owncloudoauth2
EPSS score
0.56%
An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. An attacker is able to pass in a crafted redirect-url that bypasses validation, and consequently allows an attacker to redirect callbacks to a Top Level Domain controlled by the attacker.