Skip to content
OpenAdvisories

Package · NuGet

IdentityServer4

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.7
    GHSA-55p7-v223-x366

    IdentityServer Open Redirect vulnerability

    ### Impact It is possible for an attacker to craft malicious Urls that certain functions in IdentityServer will incorrectly treat as local and trusted. If such a Url is returned as a redirect, some browsers will follow it to a third-party, untrusted site. ###…

    IdentityServer4 NuGet
  • Medium 4.7
    CVE-2024-39694

    Duende IdentityServer Open Redirect vulnerability

    Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to craft malicious Urls that certain functions in IdentityServer will incorrectly treat as local and trusted. If such a Url is returned as a re…

    DuendeSoftware IdentityServer Duende.IdentityServer IdentityServer4 NuGet