Skip to main content

Oauth2 Proxy CVE-2017-1000069

HIGH
Cross-Site Request Forgery (CSRF) (CWE-352)
2017-07-17 cve@mitre.org
CSRF Oauth2 Proxy Oauth2 Proxy Project
8.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jul 17, 2017 - 13:18 cve.org
HIGH 8.8

DescriptionCVE.org

CSRF in Bitly oauth2_proxy 2.1 during authentication flow

AnalysisAI

CSRF in Bitly oauth2_proxy 2.1 during authentication flow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Affected products include: Oauth2 Proxy Project Oauth2 Proxy.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.

More in Oauth2 Proxy

View all
CVE-2021-21291 MEDIUM POC
6.1 Feb 02

OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google
CVE-2020-5233 MEDIUM POC
6.1 Jan 30

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remo
CVE-2026-76835 CRITICAL POC
9.3 Aug 24

Authentication bypass in OAuth2 Proxy (versions 7.5.0 up to but excluding 7.15.2) lets an unauthenticated remote attacke
CVE-2026-34457 CRITICAL
9.1 Apr 14

Authentication bypass in OAuth2 Proxy versions before 7.15.2 allows remote unauthenticated attackers to access protected
CVE-2026-41059 HIGH
8.2 Apr 21

Authentication bypass in OAuth2 Proxy 7.5.0-7.15.1 allows remote unauthenticated attackers to access protected resources
CVE-2017-1000070 MEDIUM
6.1 Jul 17

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and te
CVE-2020-11053 MEDIUM
6.1 May 07

In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Rated medium severity (CVSS 6.1), this vulnerabil
CVE-2021-21411 MEDIUM
5.5 Mar 26

OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. Rated

CVE-2020-4037 MEDIUM
5.4 Jun 29

In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to se
CVE-2026-34454 LOW
3.5 Apr 14

OAuth2 Proxy versions 7.11.0 through 7.15.1 fail to clear the session cookie when rendering the sign-in page due to a re

Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)

View all
CVE-2016-6277 HIGH POC
8.8
CVE-2014-100005 HIGH POC
8.0
CVE-2013-5696 MEDIUM POC
6.8
CVE-2020-36836 HIGH POC
8.0
CVE-2015-2295 MEDIUM POC
6.8
CVE-2016-6897 MEDIUM POC
6.5
CVE-2022-41622 HIGH POC
8.8
CVE-2025-2907 CRITICAL POC
9.8

Same technique CSRF

View all
CVE-2016-6277 HIGH POC
8.8
CVE-2014-100005 HIGH POC
8.0
CVE-2017-9757 HIGH POC
8.8
CVE-2013-5696 MEDIUM POC
6.8
CVE-2013-4152 MEDIUM POC
6.8
CVE-2024-7094 CRITICAL
9.8
CVE-2015-4624 HIGH POC
7.5
CVE-2020-36836 HIGH POC
8.0

Share

CVE-2017-1000069 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy