Threats tagged 'ghsa-w8p2-r796-3vmq'

Authlib's OAuth 2.0 authorization endpoint in kimi-cli versions prior to 1.6.10, certain 1.7.x versions, and some 2.x versions contains an open redirect vulnerability. This occurs when an unsupported response_type is used along with an attacker-controlled redirect_uri, allowing redirection without client validation or user authentication. The flaw exists because the server returns a redirect response to the supplied redirect_uri before validating the client or redirect URI. This vulnerability has a CVSS score of 5.4 (medium severity) and affects multiple versions as specified. A patch is available to address this issue.