8 matches found
CVE-2026-116072
Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...
CVE-2026-116072 Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity
Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...
CVE-2026-116072 Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity
Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...
CVE-2026-116072 Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity
Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...
CVE-2026-116072
The Infinity for Reddit application (through version 8.3.4 ) is vulnerable to a login cross-site request forgery (CSRF) vulnerability within the LoginChromeCustomTabActivity redirect handler. The root cause is the handler's use of a hardcoded OAuth state value . An attacker can authorize the app'...
EUVD-2026-109386
Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the...
PT-2026-122975
Name of the Vulnerable Software and Affected Versions Infinity for Reddit versions prior to 8.3.5 Description A login cross-site request forgery issue exists in the exported LoginChromeCustomTabActivity redirect handler. The handler uses a hardcoded OAuth state value, which allows an attacker to...
Docile-Alligator Infinity For Reddit+ Cross-site Request Forgery vulnerability
Docile-Alligator Infinity For Reddit+ versions 8.3.4 and earlier contain a cross-site request forgery vulnerability. This flaw arises because the LoginChromeCustomTabActivity redirect handler validates a hard-coded OAuth state value, enabling attackers to forge login requests. As a result,...