Read the docs

OpenID

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

OpenID records in CISA KEV

No OpenID vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openid 4 records LOW Openid4java 1 record LOW Openid Connect 1 record LOW Ruby-openid 1 record MEDIUM

Records

1 record in Openid Connect · all components

TI-2019-07220 CVE-2019-9837 · GHSA-vv4c-g6q7-p3q7

Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and…

Priority LOW 30

Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that results in an error respons…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01349 Published 2019-03-15 Fixed in 1.5.4 CWE-601
Open these records in search →