Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes
概要
Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the originCheck middleware function, which affects the following routes: /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, /oauth-proxy-callback. This vulnerability is fixed in 1.2.10.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov