Omniauth-oauth2 Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Omniauth-oauth2 Project records in CISA KEV

No Omniauth-oauth2 Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Omniauth-oauth2 1 record LOW

Records

1 record

TI-2012-05096 CVE-2012-6134 · GHSA-fgmx-8h93-26fh

Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01196 Published 2013-04-09 Fixed in 1.1.1 CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0