CVE-2020-5233: OAUTH2 Proxy Project OAUTH2 Proxy

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

Affected products

• OAUTH2 Proxy Project OAUTH2 Proxy: before 5.0.0 (fixed in 5.0.0)

Published 2020-01-30. Last modified 2026-06-17.