CVE-2022-3145

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.

Score

CVSS 3.1 4.7 Medium

Status

Modified - psirt@okta.com

Published

2023-01-12

Last modified

2025-04-08

Weaknesses

CWE-601

Affected products

• Oidc Middleware (Okta)
• Okta Oidc Middleware (Okta)

References

• https://github.com/okta/okta-oidc-middleware/security/advisories/GHSA-58h4-9m7m-j9m4