Omniauth-weibo-oauth2 Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Omniauth-weibo-oauth2 Project records in CISA KEV

No Omniauth-weibo-oauth2 Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2019-12883 CVE-2019-17268 · GHSA-vr22-43gj-rx3f

MEDIUM 47

The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02437 Published 2020-02-07 Fixed in 0.5.1 CWE-94