6 matches found
CVE-2020-36599
lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...
Linux Distros Unpatched Vulnerability : CVE-2020-36599
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value. CVE-2020-36599 Note that Nessus relies on the...
CVE-2020-36599
lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...
CVE-2020-36599
Summary: CVE-2020-36599 affects the Ruby library OmniAuth, specifically lib/omniauth/failure_endpoint.rb. The issue occurs in OmniAuth before 1.9.2 and before 2.0 where the message_key value is not escaped, as described in the initial description and corroborated by references pointing to 1.9.2 r...
