Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Openid Subscribe
Filtered by product Ruby-openid
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-11027 1 Openid 1 Ruby-openid 2019-06-14 10.0 HIGH 9.8 CRITICAL
Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to employ the ruby-openid library. Developers who based their OpenID integration heavily on the "example app" provided by the project are at highest risk.