Skip to content
OpenAdvisories

Product · DuendeSoftware

IdentityServer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2024-39694

    Duende IdentityServer Open Redirect vulnerability

    Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to craft malicious Urls that certain functions in IdentityServer will incorrectly treat as local and trusted. If such a Url is returned as a re…

    DuendeSoftware IdentityServer Duende.IdentityServer IdentityServer4 NuGet