Archive
18 November 2021
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Critical 9.3
Authentication Bypass by CSRF Weakness
### Impact The actual vulnerability has been discovered on `solidus_auth_devise`. See [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2) for details. The security advisory here exists to provide an …
-
Critical 9.0
Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the …