TI-2021-10150 CVE-2021-29437
Account compromise by man-in-the-middle attack
Priority LOW 37
ScratchOAuth2 is an Oauth implementation for Scratch.
ScratchVerifier
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
ScratchVerifier records in CISA KEVNo ScratchVerifier vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2020-16057 CVE-2020-26236
Verification Code Hijacking in ScratchVerifier
Priority LOW 35
In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins.