CVE-2022-3145P4MEDIUMCVSS 4.7≥ 0, < 5.0.02023-01-09
CVE-2022-3145 [MEDIUM] CWE-601 @okta/oidc-middlewareOpen Redirect vulnerability
@okta/oidc-middlewareOpen Redirect vulnerability
An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL.
**Affected products and versions**
Okta OIDC Middleware prior to version 5.0.0.
**Resolution**
The vulnerability is fixed in OIDC Middleware 5.0.0. To remediate this vulnerability, upgrade Okta OIDC Middleware to this vers
ghsaosv