CVE-2023-49104 | BDVDB-2026-217469 Detail

Description#

An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. An attacker is able to pass in a crafted redirect-url that bypasses validation, and consequently allows an attacker to redirect callbacks to a Top Level Domain controlled by the attacker.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-11-21Record published in the CVE List.
2. Version 22024-09-04Most recent update recorded in the CVE List.