CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

osv_ghsa•added 2022/08/19 12:00 a.m.•47 views

GHSA-PM55-QFXR-H247 OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...

9.8CVSS9.4AI score0.01163EPSS

SaveExploits0References5

NVD•added 2022/08/18 11:15 p.m.•27 views

CVE-2020-36599

lib/omniauth/failureendpoint.rb in OmniAuth before 1.9.2 and before 2.0 does not escape the messagekey value...

9.8CVSS0.01163EPSS

SaveExploits0References2

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by