Skip to content
OpenAdvisories

Vendor

gitify-app

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 3.1

    Gitify before 7.10.0 Login CSRF via Missing OAuth State Validation

    Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link …