Madeofcode

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Madeofcode records in CISA KEV

No Madeofcode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Omniauth-facebook 1 record LOW

Records

1 record

TI-2013-04007 CVE-2013-4562 · GHSA-cf36-985g-v73c

The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session…

LOW 32

The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01167 Published 2014-05-13 Fixed in 1.5.0 CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0