https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-08T22:46:59.196088+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-83589 CVE-2026-83589 — Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect 2026-10-08T22:46:59.197065+00:00

Affected: Red Hat OpenShift Container Platform 4.20, Red Hat OpenShift Container Platform 4.21, Red Hat OpenShift Container Platform 4.22, Red Hat OpenShift Container Platform 4

A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft.