Skip to content
OpenAdvisories

Vendor

ScratchVerifier

2 known vulnerabilities.

Products

ScratchVerifier 1 ScratchOAuth2 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.0
    CVE-2021-29437

    Account compromise by man-in-the-middle attack

    ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a third party. 1. Scratch user visits 3rd party site. 2. 3rd party site asks user for Scratch usernam…

    ScratchVerifier ScratchOAuth2
  • High 7.5
    CVE-2020-26236

    Verification Code Hijacking in ScratchVerifier

    In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. A…

    ScratchVerifier ScratchVerifier