Lucene search

K
osvGoogleOSV:PYSEC-2014-85
HistoryMay 20, 2014 - 2:55 p.m.

PYSEC-2014-85

2014-05-2014:55:00
Google
osv.dev
5

0.003 Low

EPSS

Percentile

66.0%

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.