Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2024/08/15 6:48 p.m.59 views

CVE-2024-42476 oauth CSRF vulnerability

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the state parameter to prevent cross-site request forgery CSRF attacks where a resource owner might have their session associated with protected resources belonging to an attacker. Whe...

6.5CVSS0.0024EPSS
SaveExploits0References3
OSV
OSV
added 2024/08/15 6:48 p.m.9 views

CVE-2024-42476 oauth CSRF vulnerability

In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the state parameter to prevent cross-site request forgery CSRF attacks where a resource owner might have their session associated with protected resources belonging to an attacker. Whe...

6.5CVSS7AI score0.0024EPSS
SaveExploits0References5
Rows per page
Query Builder