Show filters
12 Total Results
Displaying 11-12 of 12
Sort by:
Attacker Value
Unknown
CVE-2013-4562
Disclosure Date: May 13, 2014 (last updated October 05, 2023)
The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.
0
Attacker Value
Unknown
CVE-2012-6134
Disclosure Date: April 09, 2013 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.
0
