Skip to content
OpenAdvisories

Vendor

synth

1 known vulnerabilities.

Products

omniauth-microsoft_graph 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2024-21632

    omniauth-microsoft_graph vulnerable to account takeover (nOAuth)

    omniauth-microsoft_graph provides an Omniauth strategy for the Microsoft Graph API. Prior to versions 2.0.0, the implementation did not validate the legitimacy of the `email` attribute of the user nor did it give/document an option to do so, making it suscept…

    synth omniauth-microsoft_graph omniauth-microsoft_graph RubyGems