Feathersjs OAuth Callback Unauthenticated Token Theft Vulnerability

A vulnerability in Feathersjs versions 5.0.0 prior to 5.0.42 allows an unauthenticated attacker to obtain a valid access token by sending a crafted GET request to /oauth/:provider/callback. The attack exploits a fallback mechanism in the OAuth authentication process that inadvertently allows the attacker to bypass the OAuth provider and directly mint a JWT for an existing user.

Impact

Exploitation of this vulnerability allows for unauthorized access to user accounts by obtaining valid access tokens without interacting with the OAuth provider.

Remediation

Users can upgrade to Feathersjs version 5.0.42 or later to address this vulnerability.