PT-2019-14810

Name of the Vulnerable Software and Affected Versions Devise Token Auth versions through 1.1.2 Description An issue was discovered in the omniauth failure endpoint, which is vulnerable to Reflected Cross Site Scripting XSS through the message parameter. Unauthenticated attackers can craft a URL...