CVE-2008-0570

The CVE affects the OpenID 5.x-1.0 and earlier Drupal module. The root cause is that the module does not properly verify the claimed_id returned by an OpenID provider, enabling remote OpenID providers to spoof OpenID authentication for domains associated with other providers. The consequence is u...