High · 8.4 CVE-2022-0916 EUVD-2022-15943GHSA-7c8f-c5jx-87w6

Broken authentication on Logitech Options due to misvalidation of Oauth state parameter

Published May 3, 2022 · Updated Sep 17, 2024 · Assigned by Logitech

Description

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

Affected products

Vendor	Product	Affected	Fixed
Logitech	Options	9.60.87 – < 9.60.87	9.60.87

References

https://support.logi.com/hc/en-us/articles/360025297893