CVE-2022-24794

    Dashboard / Vulnerabilities / CVE-2022-24794

    CVE-2022-24794

    Published: 31 Mar 2022Last Modified: 12 Aug 2026

    Summary: Open Redirect in express-openid-connect

    Details: Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users of the `requiresAuth` middleware, either directly or through the default `authRequired` option, are vulnerable to an Open Redirect when the middleware is applied to a catch all route. If all routes under `example.com` are protected with the `requiresAuth` middleware, a visit to `http://example.com//google.com` will be redirected to `google.com` after login because the original url reported by the Express framework is not properly sanitized. This vulnerability affects versions prior to 2.7.2. Users are advised to upgrade. There are no known workarounds.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24794.json, https://github.com/auth0/express-openid-connect/security/advisories/GHSA-7p99-3798-f85c, https://nvd.nist.gov/vuln/detail/CVE-2022-24794, https://github.com/auth0/express-openid-connect/commit/0947b92164a2c5f661ebcc183d37e7f21de719ad

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -1e86d81c113076ad46f618f8e8c6b88f2f8e2dee

    Affected versions

    v2.7.1
    v2.7.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-24794 | CVE-DB