Lightopenid Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lightopenid Project records in CISA KEV

No Lightopenid Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2019-08275 CVE-2019-11066 · GHSA-6pjf-pvwc-xw7f

MEDIUM 45

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01514 Published 2019-05-10 No fix listed CWE-918