Lucene search
PRIOn knowledge basePRION:CVE-2019-16751HistorySep 24, 2019 - 6:15 p.m.
Cross site scripting
2019-09-2418:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
37.4%
An issue was discovered in Devise Token Auth through 1.1.2. The omniauth failure endpoint is vulnerable to Reflected Cross Site Scripting (XSS) through the message parameter. Unauthenticated attackers can craft a URL that executes a malicious JavaScript payload in the victim’s browser. This affects the fallback_render method in the omniauth callbacks controller.
| CPE | Name | Operator | Version |
|---|---|---|---|
| devise_token_auth | ge | 0.1.33 | |
| devise_token_auth | le | 1.1.2 |
Related
osv
osv
CVE-2019-16751
2019-09-24 18:15:11
Devise Token Auth vulnerable to Cross-site Scripting
2022-05-24 16:56:43
veracode
veracode
Cross-site Scripting (XSS)
2019-09-25 03:11:50
nvd
nvd
CVE-2019-16751
2019-09-24 18:15:11
cvelist
cvelist
CVE-2019-16751
2019-09-24 17:14:08
cve
cve
CVE-2019-16751
2019-09-24 18:15:11
github
github
Devise Token Auth vulnerable to Cross-site Scripting
2022-05-24 16:56:43