1417 matches found
DEBIAN-CVE-2017-6413
The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" aka modauthopenidc module before 2.1.6 for the Apache HTTP Server does not skip OIDCCLAIM and OIDCAuthNHeader headers in an "AuthType oauth20" configuration, which allows remote attackers to bypass authentication via crafted HTTP...
PT-2017-4171
Name of the Vulnerable Software and Affected Versions mod auth openidc versions prior to 2.4.9 Description The issue is related to the oidc validate redirect url function in mod auth openidc, which does not parse URLs the same way as most browsers do. This leads to an Open Redirect vulnerability ...
flask-oidc open redirect vulnerability
flask-oidc is a library for supporting OpenID connections to flask. An open redirection vulnerability exists in flask-oidc 0.1.2 and earlier versions, which can be exploited by an attacker to redirect a user to an arbitrary website and execute a phishing attack...
PYSEC-2016-25
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
Open redirect
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
PYSEC-2016-25
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
CVE-2016-1000001
The CVE-2016-1000001 entry concerns the flask-oidc library, where versions 0.1.2 and earlier are vulnerable to an open redirect. The vulnerability enables a misused redirect to an arbitrary URL, potentially facilitating phishing or credential-stealing scenarios for users who interact with a craft...
CVE-2016-1000001: URL Redirection to Untrusted Site
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect...
PT-2016-4490
Name of the Vulnerable Software and Affected Versions flask-oidc versions 0.1.2 and earlier Description The issue is related to an open redirect. Recommendations For versions 0.1.2 and earlier, update to a version later than 0.1.2 to resolve the issue...
CVE-2016-0283
CVE-2016-0283 affects IBM WebSphere Application Server Liberty Profile 8.5.5 before 8.5.5.9. The OpenID Connect (OIDC) client web application is vulnerable to cross-site scripting (XSS) via a crafted URL, enabling a remote attacker to inject web script or HTML in the victim’s browser. Impact per ...
CVE-2016-0283: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the OpenID Connect OIDC client web application in IBM WebSphere Application Server WAS Liberty Profile 8.5.5 before 8.5.5.9 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
