Description
An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Okta | Okta OIDC Middleware | prior to 5.0.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @okta/oidc-middleware | < 5.0.0 | 5.0.0 | GHSA-58h4-9m7m-j9m4 |