Skip to content
OpenAdvisories

Product · ScratchVerifier

ScratchOAuth2

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.0

    Account compromise by man-in-the-middle attack

    ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a third party. 1. Scratch user visits 3rd party site. 2. 3rd party site asks user for Scratch usernam…