CVE-2017-1000070

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10000718.1Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against a CVE-2017-10000729.8Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modification of unexpected mem CVE-2017-10000739.8Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.CVE-2017-10000749.8Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.CVE-2017-10000759.8Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function CVE-2017-10000786.1Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration CVE-2017-10000797.5Linux foundation ONOS 1.9.0 is vulnerable to a DoS.CVE-2017-10000807.5Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets.CVE-2017-10000819.8Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.CVE-2017-10000829.8systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with r CVE-2017-10000837.8backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary com CVE-2017-10000846.5Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication i