3 matches found
CVE-2021-43203
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...
7.5CVSS7.1AI score0.00836EPSS
SaveExploits0References2
JetBrains Ktor framework 授权问题漏洞
JetBrains Ktor is a web application framework from JetBrains Czech Republic. An authorization issue vulnerability exists in JetBrains Ktor prior to 1.6.4, which stems from improper implementation of nonce authentication in the OAuth2 authentication process. No detailed vulnerability details are...
7.5CVSS5.6AI score0.00836EPSS
SaveExploits0References3
PYSEC-2014-86
The 1 makenonce, 2 generatenonce, and 3 generateverifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack...
5.8CVSS5.4AI score0.0245EPSS
SaveExploits0References5
20