GHSA-vp58-j275-797x: Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
(updated )
A bypass was found for wildcard or absolute URLs trustedOrigins configurations and opens the victims website to a Open Redirect vulnerability, where it can be used to steal the reset password token of a victims account by changing the “callbackURL” parameter value to a website owned by the attacker.
References
- github.com/advisories/GHSA-vp58-j275-797x
- github.com/better-auth/better-auth
- github.com/better-auth/better-auth/blob/ddebd0358d74376ea64541512d0167dd4377f182/packages/better-auth/src/api/middlewares/origin-check.ts
- github.com/better-auth/better-auth/commit/b381cac7aafd6aa53ef78b6ab771ebfa24643c80
- github.com/better-auth/better-auth/security/advisories/GHSA-vp58-j275-797x
Code Behaviors & Features
Detect and mitigate GHSA-vp58-j275-797x with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →