Lucene search
MitreCVELIST:CVE-2019-16751HistorySep 24, 2019 - 5:14 p.m.
CVE-2019-16751
2019-09-2417:14:08
mitre
www.cve.org
1
0.001 Low
EPSS
Percentile
37.4%
An issue was discovered in Devise Token Auth through 1.1.2. The omniauth failure endpoint is vulnerable to Reflected Cross Site Scripting (XSS) through the message parameter. Unauthenticated attackers can craft a URL that executes a malicious JavaScript payload in the victim’s browser. This affects the fallback_render method in the omniauth callbacks controller.
Related
osv
osv
CVE-2019-16751
2019-09-24 18:15:11
Devise Token Auth vulnerable to Cross-site Scripting
2022-05-24 16:56:43
veracode
veracode
Cross-site Scripting (XSS)
2019-09-25 03:11:50
prion
prion
Cross site scripting
2019-09-24 18:15:00
cve
cve
CVE-2019-16751
2019-09-24 18:15:11
github
github
Devise Token Auth vulnerable to Cross-site Scripting
2022-05-24 16:56:43
nvd
nvd
CVE-2019-16751
2019-09-24 18:15:11