Skip to content
Threat Feed

Product

Github.com/Lin-Snow/Ech0 (< 1.4.8-0.20260503040728-A7e8b8e84bd1)

1 brief RSS
medium advisory

Ech0 OAuth Redirect URI Validation Bypass Vulnerability

Ech0's OAuth redirect URI validation ignores the path component, allowing attackers to craft malicious redirect URIs for exchange-code theft and potential account takeover.

github.com/lin-snow/Ech0 oauth redirect_bypass account_takeover web_application
2r 1t