Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Openid Subscribe
Filtered by product Openid Connect
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-9837 1 Openid 1 Openid Connect 2019-03-27 5.8 MEDIUM 6.1 MEDIUM
Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that results in an error response) with the 'openid' scope and a prompt=none value. This allows phishing attacks against the authorization flow.