Description
A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirect_url leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zlt2000 | microservices-platform | 6.0 | — |
References
- VDB-319233 | zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect vdb-entry technical-description
- VDB-319233 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #623477 | zlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Open Redirect third-party-advisory
- https://github.com/zlt2000/microservices-platform/issues/78 issue-tracking
- https://github.com/zlt2000/microservices-platform/issues/78#issue-3264847333 exploit issue-tracking