Janrain

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Janrain records in CISA KEV

No Janrain vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php-openid 3 records MEDIUM Rpx 2 records LOW Ruby-openid 1 record LOW

Records

1 record in Ruby-openid · all components

TI-2013-01597 CVE-2013-1812 · GHSA-6c8p-qphv-668v

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a…

LOW 24

The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02132 Published 2013-12-12 Fixed in 2.2.2 CWE-399

Open these records in search →

Critical	0
High	2
Medium	4
Low	0
No CVSS	0