Description (CNA)
A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirect_url leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| zlt2000 / microservices-platform | affected 6.0 |
CWE
CWE-601
References
- https://vuldb.com/?id.319233
- https://vuldb.com/?ctiid.319233
- https://vuldb.com/?submit.623477
- https://github.com/zlt2000/microservices-platform/issues/78
- https://github.com/zlt2000/microservices-platform/issues/78#issue-3264847333
ADP enrichment
No English description supplied.
No references supplied.