CVE-2025-53535
Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes
Résumé
Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the originCheck middleware function, which affects the following routes: /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, /oauth-proxy-callback. This vulnerability is fixed in 1.2.10.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov