Description
An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.
Remediation
References
https://github.com/okta/okta-oidc-middleware/security/advisories/GHSA-58h4-9m7m-j9m4
Related Vulnerabilities
CVE-2017-20162 Vulnerability in npm package ms
CVE-2019-1010091 Vulnerability in maven package org.webjars.bower:tinymce
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-trino
CVE-2022-21169 Vulnerability in npm package express-xss-sanitizer
CVE-2022-2216 Vulnerability in maven package org.webjars.npm:parse-url