CVE-2019-3778

Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the "redirect_uri" parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and uses the DefaultRedirectResolver in the AuthorizationEndpoint. This vulnerability does not expose applications that: Act in the role of an Authorization Server and uses a different RedirectResolver implementation other than DefaultRedirectResolver, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient).

• CWE-601
• CWE-601

• http://packetstormsecurity.com/files/153299/Spring-Security-OAuth-2.3-Open-Redirection.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/107153Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2019-3778Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlThird Party Advisory
• http://packetstormsecurity.com/files/153299/Spring-Security-OAuth-2.3-Open-Redirection.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/107153Third Party Advisory, VDB Entry
• https://pivotal.io/security/cve-2019-3778Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlThird Party Advisory

Published

Mar 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3772Spring Integration (spring-integration-xml and spring-integr…
• CVE-2019-3773Spring Web Services, versions 2.4.3, 3.0.4, and older unsupp…9.8
• CVE-2019-3774Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsuppo…
• CVE-2019-3775Cloud Foundry UAA, versions prior to v70.0, allows a user to…7.1
• CVE-2019-3776Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, …7.2
• CVE-2019-3777Pivotal Application Service (PAS), versions 2.2.x prior to 2…8
• CVE-2019-3779Cloud Foundry Container Runtime, versions prior to 0.29.0, d…8.8
• CVE-2019-3780Cloud Foundry Container Runtime, versions prior to 0.28.0, d…8.8
• CVE-2019-3781Cloud Foundry CLI, versions prior to v6.43.0, improperly exp…8.8
• CVE-2019-3782Cloud Foundry CredHub CLI, versions prior to 2.2.1, inadvert…7.8
• CVE-2019-3783Cloud Foundry Stratos, versions prior to 2.3.0, deploys with…8.8
• CVE-2019-3784Cloud Foundry Stratos, versions prior to 2.3.0, contains an …8.2