Skip to content
OpenAdvisories

Product · basecamp

google_sign_in

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2025-58067

    Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URI

    Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.1, it is possible to redirect a user to another origin if the "proceed_to" value in the session store is set to a protocol-relative URL. Normally the value of this URL i…

    basecamp google_sign_in google_sign_in RubyGems
  • Medium 4.2
    CVE-2025-57821

    Basecamp's Google Sign-In for Rails allowed redirects to a malformed URL

    Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.0, it is possible to craft a malformed URL that passes the "same origin" check, resulting in the user being redirected to another origin. Rails applications configured t…

    basecamp google_sign_in google_sign_in RubyGems