Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: CORDEA Clear all filters
TI-2024-28444 CVE-2024-42476

oauth CSRF vulnerability

Priority LOW 28

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the `state` parameter to prevent cross-site request forgery (CSRF) attacks where a resource owner might hav…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0024 Published 2024-08-15 Fixed in 0.11 CWE-352
TI-2024-28443 CVE-2024-42475

Cross-site request forgery in CORDEA oauth

Priority LOW 28

In the OAuth library for nim prior to version 0.11, the `state` values generated by the `generateState` function do not have sufficient entropy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0025 Published 2024-08-15 Fixed in 0.11 CWE-330