PT-2013-1909

Name of the Vulnerable Software and Affected Versions omniauth-oauth2 gem versions 1.1.1 and earlier Description The issue is a cross-site request forgery CSRF vulnerability that allows remote attackers to hijack the authentication of users for requests that modify session state. This is a type o...

CVE-2012-6134: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state...

Ruby on Rails omniauth-oauth2 Gem CSRF vulnerability

The omniauth-oauth2 Ruby Gem contains a flaw that allows an attacker to inject values into a user's session through a CSRF attack...