Lucene search

K
cvelistRedhatCVELIST:CVE-2012-6134
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-6134

2022-10-0316:15:29
redhat
www.cve.org
csrf
omniauth-oauth2
ruby
authentication
session state

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.6%

Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.6%

Related for CVELIST:CVE-2012-6134