Affected versions of the package do not remove clientsecret from the URI generated by getAuthUri...
5.4CVSS5.8AI score
SaveExploits0References1
Veracode•added 2017/05/09 8:46 a.m.•17 views
Information Disclosure
nforce is vulnerable to information disclosure. The vulnerability exists because index.js leaks the clientsecret from the URI generated by getAuthUri...
