Description
Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/pomerium/pomerium | >= 0.10.0, < 0.13.4 | 0.13.4 | GHSA-fv82-r8qv-ch4v |
Medium · 6.1
CVE-2021-29652
EUVD-2021-1066GHSA-fv82-r8qv-ch4vGO-2022-0827
pomerium_signature is not verified in middleware in github.com/pomerium/pomerium
Published Apr 2, 2021 · Updated Aug 3, 2024 · Assigned by mitre