NVD Vulnerability Detail

CVE-2020-26938

Summary	In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked against an incorrect URI pattern ("[a-zA-Z][a-zA-Z0-9+.-]+:") before making a redirection. This allows a malicious client to pass an XSS payload through the redirect_uri parameter while making an authorization request. NOTE: this vulnerability is similar to CVE-2020-7741.
Publication Date	Aug. 30, 2022, 6:15 a.m.
Registration Date	Aug. 30, 2022, 10 a.m.
Last Update	Nov. 21, 2024, 2:20 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:oauth2-server_project:oauth2-server::::::node.js::*			3.1.1

Related information, measures and tools

No	URL	タグ
1	https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/grant-types/authorization-code-grant-type.js#L143	Exploit Third Party Advisory
2	https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/grant-types/authorization-code-grant-type.js#L143	Exploit Third Party Advisory
3	https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/validator/is.js#L12	Exploit Third Party Advisory
4	https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/validator/is.js#L12	Exploit Third Party Advisory
5	https://github.com/oauthjs/node-oauth2-server/issues/637	Issue Tracking Third Party Advisory
6	https://github.com/oauthjs/node-oauth2-server/issues/637	Issue Tracking Third Party Advisory
7	https://tools.ietf.org/html/rfc3986#section-3	Third Party Advisory
8	https://tools.ietf.org/html/rfc3986#section-3	Third Party Advisory
9	https://tools.ietf.org/html/rfc6749#section-3.1.2	Third Party Advisory
10	https://tools.ietf.org/html/rfc6749#section-3.1.2	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-601	オープンリダイレクト	https://cwe.mitre.org/data/definitions/601.html

JVN Vulnerability Information

oauth2-server project の Node.js 用 oauth2-server におけるオープンリダイレクトの脆弱性

Title	oauth2-server project の Node.js 用 oauth2-server におけるオープンリダイレクトの脆弱性
Summary	oauth2-server project の Node.js 用 oauth2-server には、オープンリダイレクトの脆弱性が存在します。
Possible impacts	情報を取得される、および情報を改ざんされる可能性があります。
Solution	参考情報を参照して適切な対策を実施してください。
Publication Date	Oct. 10, 2020, midnight
Registration Date	Oct. 2, 2023, 5:13 p.m.
Last Update	Oct. 2, 2023, 5:13 p.m.

Affected System

oauth2-server project

oauth2-server 3.1.1 およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-26938	https://www.cve.org/CVERecord?id=CVE-2020-26938
National Vulnerability Database (NVD)
2	CVE-2020-26938	https://nvd.nist.gov/vuln/detail/CVE-2020-26938

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-601	https://cwe.mitre.org/data/definitions/601.html

その他

No	Name	URL
関連文書
1	github.com (authorization-code-grant-type.js#L143)	https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/grant-types/authorization-code-grant-type.js#L143
2	github.com (is.js#L12)	https://github.com/oauthjs/node-oauth2-server/blob/91d2cbe70a0eddc53d72def96864e2de0fd41703/lib/validator/is.js#L12
3	github.com (issues/637)	https://github.com/oauthjs/node-oauth2-server/issues/637
4	tools.ietf.org (rfc3986#section-3)	https://tools.ietf.org/html/rfc3986#section-3
5	tools.ietf.org (rfc6749#section-3.1.2)	https://tools.ietf.org/html/rfc6749#section-3.1.2

Change Log

No	Changed Details	Date of change
1	[2023年10月02日] 掲載	Oct. 2, 2023, 5:13 p.m.