Lucene search
GoogleOSV:GHSA-CF36-985G-V73CHistoryOct 24, 2017 - 6:33 p.m.
omniauth-facebook Cross-Site Request Forgery vulnerability
2017-10-2418:33:37
Google
osv.dev
8
0.008 Low
EPSS
Percentile
81.6%
The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| omniauth-facebook | eq | 1.4.1 |
References
Related
cve
cve
CVE-2013-4562
2014-05-13 15:55:04
prion
prion
Cross site request forgery (csrf)
2014-05-13 15:55:00
cvelist
cvelist
CVE-2013-4562
2014-05-13 15:00:00
nvd
nvd
CVE-2013-4562
2014-05-13 15:55:04
github
github
omniauth-facebook Cross-Site Request Forgery vulnerability
2017-10-24 18:33:37
debiancve
debiancve
CVE-2013-4562
2014-05-13 15:55:04