Skip to content
OpenAdvisories

Package · RubyGems

omniauth-oauth2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2012-6134

    omniauth-oauth2 Cross-Site Request Forgery vulnerability

    Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.

    omniauth-oauth2 RubyGems