🎯 New Report #3588801: OAuth redirect uri validation bypass for :proxima first party sync apps
🔺Severity: High
👽 Reporter: ahacker1
⭐️ Reputation: 7438
🛠 State: resolved
💼 Team: GitHub
💵 Bounty: null
🕐 Submitted: 2026-03-06
⏰ Disclosed: 2026-07-21 21:43:34
📝 Summary: A vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation. The vulnerability was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. The vulnerability was reported through the GitHub Bug Bounty program.
📂 Report JSON File: 3588801
@hackeronereports