Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Madeofcode Subscribe
Filtered by product Omniauth-facebook
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4562 1 Madeofcode 1 Omniauth-facebook 2014-05-14 6.8 MEDIUM N/A
The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.