5 matches found
CVE-2022-2303
An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. It may be possible for group members to bypass 2FA enforcement enabled at the group level by using Resource Owner Passwo...
CVE-2023-43990
An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2023-19809 · Onedev · Onedev
Name of the Vulnerable Software and Affected Versions: Onedev versions prior to 7.9.12 Description: Onedev is a self-hosted Git Server with CI/CD and Kanban. The algorithm used to generate access token and password reset keys was not cryptographically secure in versions prior to 7.9.12. Existing...
CVE-2013-4593
RubyGem omniauth-facebook has an access token security vulnerability...
PT-2019-6955
Name of the Vulnerable Software and Affected Versions omniauth-facebook affected versions not specified Description The RubyGem omniauth-facebook has an access token security issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this...