Vulnerabilities

TI-2013-03808 CVE-2013-4347 · GHSA-rv8h-p43r-4x5r

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo…

LOW 31

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brut…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02441 Published 2014-05-20 Partial fix · 1.9rc1 CWE-310

TI-2013-03807 CVE-2013-4346 · GHSA-4433-4cxq-vv73

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce…

LOW 25

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02441 Published 2014-05-20 Partial fix CWE-310

Vulnerabilities

Filters

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo…

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce…