Skip to main content

URL Redirection to Untrusted Site ('Open Redirect')

CVE-2025-53535

Low
2.1/10

Summary

Better Auth is an authentication and authorization library for TypeScript. An Open Redirect has been found in the `originCheck` middleware function, which affects the following routes: `/verify-email`, `/reset-password/:token`, `/delete-user/callback`, `/magic-link/verify`, `/oauth-proxy-callback`. This issue affects @better-auth/expo versions prior to 1.2.10.

  • LOW
  • NETWORK
  • PASSIVE
  • NONE

CWE-601 - Open Redirect

An open redirect attack employs a URL parameter, HTML refresh tags, or a DOM based location change to exploit the trust of a vulnerable domain to direct the users to a malicious website. The attack could lead to higher severity vulnerabilities such as unauthorized access control, account takeover, XSS, and more.

References

Advisory Timeline

  • Published