Skip to content
OpenAdvisories
High · 7.5 CVE-2013-4593 EUVD-2022-2099GHSA-33vg-hpx5-pfxg

omniauth-facebook Improper Authentication vulnerability

Published Dec 11, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Vendor: omniauth-facebook Product: omniauth-facebook Package: omniauth-facebook Ecosystem: RubyGems

Description

RubyGem omniauth-facebook has an access token security vulnerability

Affected products

VendorProductAffectedFixed
omniauth-facebook omniauth-facebook <= 1.5.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems omniauth-facebook < 1.5.1 1.5.1 GHSA-33vg-hpx5-pfxg

References