TI-2021-10150 CVE-2021-29437
Account compromise by man-in-the-middle attack
Priority LOW 37
ScratchOAuth2 is an Oauth implementation for Scratch.
Vulnerabilities
2 records
TI-2020-16057 CVE-2020-26236
Verification Code Hijacking in ScratchVerifier
Priority LOW 35
In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins.