PT-2026-61821 · Trino · Trino
CVSS v4.0
5.3
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X |
Name of the Vulnerable Software and Affected Versions
trinodb trino version 481
Description
An open redirect issue exists within the OAuth2/OIDC component in the file
core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java. A remote attacker can trigger this by manipulating the redirect uri argument.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Trino