omniauth-facebook

2 results · Feed

• High 7.5
  CVE-2013-4593

  omniauth-facebook Improper Authentication vulnerability

  RubyGem omniauth-facebook has an access token security vulnerability

  omniauth-facebook omniauth-facebook omniauth-facebook RubyGems
  Dec 11, 2019
• Medium —
  CVE-2013-4562

  omniauth-facebook Cross-Site Request Forgery vulnerability

  The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.

  omniauth-facebook RubyGems
  May 13, 2014