2724 matches found
CVE-2007-1651
CVE-2007-1651 describes a CSRF vulnerability in OpenID that can allow remote attackers to restore a user’s login session on an OpenID-enabled site after the user has signed into an OpenID server, logged into the site, and then logged out. Connected sources show a CVSSv2 base score of 6.8 (MEDIUM)...
Authentication bypass via attacker provided openid server
Description Impact The outdated version 1 of the Steam Socialite Provider doesn't check properly if the login comes from steamcommunity.com, allowing a malicious actor to substitute their own openID server. Patches This vulnerability only affects the outdated v1.x versions of the package. These a...
Authentication bypass via attacker provided openid server
Impact The outdated version 1 of the Steam Socialite Provider doesn't check properly if the login comes from steamcommunity.com, allowing a malicious actor to substitute their own openID server. Patches This vulnerability only affects the outdated v1.x versions of the package. These are no longer...