Coolify OAuth Configuration Exposure Vulnerability

A vulnerability in Coolify versions prior to 4.0.0-beta.361 allows any authenticated user to access and modify the global OAuth configuration. This flaw arises from a lack of proper authorization, which enables the exposure of sensitive information such as the 'client id' and 'client secret' for all custom OAuth providers used in the Coolify instance.

Impact

Exploitation of this vulnerability leads to unauthorized access to OAuth credentials, which could be misused to impersonate the application or its users with the affected OAuth providers.

Reproduction

To reproduce this vulnerability, authenticate as a user with access to the Coolify instance. Then, navigate to the OAuth settings page. The absence of proper authorization will allow access to the OAuth configuration, including sensitive credentials.

Remediation

Users should upgrade to Coolify version 4.0.0-beta.361 or later.