CVE-2026-19078

A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an attacker-controlled website. This could enable phishing attacks, potentially tricking users into revealing sensitive information.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2026-19078
https://bugzilla.redhat.com/show_bug.cgi?id=2511975

Configurations

No configuration.

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Se encontró una falla en el componente oauth-server. Esta vulnerabilidad de redirección abierta ocurre cuando el parámetro ’then’ en el gestor de aprobación de concesión no se valida correctamente. Un atacante remoto puede crear una URL maliciosa que, cuando es aprobada o denegada por un usuario autenticado, los redirige a un sitio web controlado por el atacante. Esto podría permitir ataques de phishing, engañando potencialmente a los usuarios para que revelen información sensible.

Information

Published : 2026-08-11 16:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-19078

Mitre link : CVE-2026-19078

CVE.ORG link : CVE-2026-19078

JSON object : View

Products Affected

No product.

CWE

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

{"id": "CVE-2026-19078", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19078", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-11T15:54:56.603573Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-oauth-server-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-oauth-server-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}]}], "published": "2026-08-11T16:17:31.620", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-19078", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511975", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-601"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an attacker-controlled website. This could enable phishing attacks, potentially tricking users into revealing sensitive information."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el componente oauth-server. Esta vulnerabilidad de redirecci\u00f3n abierta ocurre cuando el par\u00e1metro \u2019then\u2019 en el gestor de aprobaci\u00f3n de concesi\u00f3n no se valida correctamente. Un atacante remoto puede crear una URL maliciosa que, cuando es aprobada o denegada por un usuario autenticado, los redirige a un sitio web controlado por el atacante. Esto podr\u00eda permitir ataques de phishing, enga\u00f1ando potencialmente a los usuarios para que revelen informaci\u00f3n sensible."}], "lastModified": "2026-10-23T19:10:00.167", "sourceIdentifier": "secalert@redhat.com"}