CyberRota Analysis
AI-GeneratedA vulnerability in the OAuth2/OIDC component of Trino allows for an open redirect due to improper handling of the `redirect_uri` argument in the ExternalUriInfo.java file. This issue can be exploited remotely, potentially leading to phishing attacks or redirecting users to malicious sites. Organizations using Trino, particularly those implementing OAuth2/OIDC for authentication, should prioritize addressing this vulnerability to mitigate associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirect_uri results in open redirect. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.