CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

OSV•added 2022/08/19 12:0 a.m.•40 views

GHSA-PM55-QFXR-H247 OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...

9.8CVSS9.4AI score0.01056EPSS

SaveExploits0References5

NVD•added 2022/08/18 11:15 p.m.•16 views

CVE-2020-36599

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...

9.8CVSS0.01056EPSS

SaveExploits0References2

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by