Skip to content
OpenAdvisories

Product · dromara

MaxKey

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-67345

    MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft

    MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedirectResolver.hostMatches() that allows remote attackers to hijack OAuth 2.0 authorization codes by supplying a crafted redirect_uri wh…

    dromara MaxKey