CVE-2025-52477

Octo-STS is a GitHub App that acts like a Security Token Service (STS) for the GitHub API. Octo-STS versions before v0.5.3 are vulnerable to unauthenticated SSRF by abusing fields in OpenID Connect tokens. Malicious tokens were shown to trigger internal network requests which could reflect error logs with sensitive information. Upgrade to v0.5.3 to resolve this issue. This version includes patch sets to sanitize input and redact logging.

• CWE-918

• https://github.com/octo-sts/app/commit/0f177fde54f9318e33f0bba6abaea9463a7c3afd
• https://github.com/octo-sts/app/commit/b3976e39bd8c8c217c0670747d34a4499043da92
• https://github.com/octo-sts/app/security/advisories/GHSA-h3qp-hwvr-9xcq
• https://github.com/octo-sts/app/security/advisories/GHSA-h3qp-hwvr-9xcq
• https://github.com/octo-sts/app/security/advisories/GHSA-h3qp-hwvr-9xcq
• https://github.com/octo-sts/app/security/advisories/GHSA-h3qp-hwvr-9xcq

Published

Jun 26, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-52471ESF-IDF is the Espressif Internet of Things (IOT) Developmen…9.8
• CVE-2025-52472XWiki Platform is a generic wiki platform offering runtime s…9.3
• CVE-2025-52473liboqs is a C-language cryptographic library that provides i…5.5
• CVE-2025-52474WeGIA is a web manager for charitable institutions. Prior to…9.8
• CVE-2025-52475Chamilo is a learning management system. Prior to version 1.…6.1
• CVE-2025-52476Chamilo is a learning management system. Prior to version 1.…6.1
• CVE-2025-52478n8n is a workflow automation platform. From 1.77.0 to before…5.4
• CVE-2025-52479HTTP.jl provides HTTP client and server functionality for Ju…7.7
• CVE-2025-5248A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-52480Registrator is a GitHub app that automates creation of regis…9.8
• CVE-2025-52482Chamilo is a learning management system. Prior to version 1.…8.3
• CVE-2025-52483Registrator is a GitHub app that automates creation of regis…9.8