Skip to content
OpenAdvisories

Archive

18 November 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3

    Authentication Bypass by CSRF Weakness

    ### Impact The actual vulnerability has been discovered on `solidus_auth_devise`. See [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2) for details. The security advisory here exists to provide an …

  • Critical 9.0

    Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the …