Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11754
HistoryJan 15, 2019 - 9:07 a.m.

Nonce Values Unchecked

2019-01-1509:07:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.003 Low

EPSS

Percentile

66.0%

python-oauth2 is vulnerable to replay attacks. This vulnerability is caused in the Server.verify_request function where it does not check the nonce value, allowing remote attackers to perform replay attacks through a signed URL.

References