Skip to content
OpenAdvisories

Vendor

Docile-Alligator

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity

    Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth st…