Skip to content
OpenAdvisories

Vendor

chaterm

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.9

    Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback

    Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlle…