CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-36599

lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.6%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2020-36599

Omniauth » Omniauth » Version: 0.0.1

cpe:2.3:a:omniauth:omniauth:0.0.1
Omniauth » Omniauth » Version: 0.0.3

cpe:2.3:a:omniauth:omniauth:0.0.3
Omniauth » Omniauth » Version: 0.0.4

cpe:2.3:a:omniauth:omniauth:0.0.4
Omniauth » Omniauth » Version: 0.1.1

cpe:2.3:a:omniauth:omniauth:0.1.1
Omniauth » Omniauth » Version: 0.1.3

cpe:2.3:a:omniauth:omniauth:0.1.3
Omniauth » Omniauth » Version: 0.1.4

cpe:2.3:a:omniauth:omniauth:0.1.4
Omniauth » Omniauth » Version: 0.1.5

cpe:2.3:a:omniauth:omniauth:0.1.5
Omniauth » Omniauth » Version: 0.1.6

cpe:2.3:a:omniauth:omniauth:0.1.6
Omniauth » Omniauth » Version: 0.2.0

cpe:2.3:a:omniauth:omniauth:0.2.0
Omniauth » Omniauth » Version: 0.2.1

cpe:2.3:a:omniauth:omniauth:0.2.1
Omniauth » Omniauth » Version: 0.2.2

cpe:2.3:a:omniauth:omniauth:0.2.2
Omniauth » Omniauth » Version: 0.2.3

cpe:2.3:a:omniauth:omniauth:0.2.3
Omniauth » Omniauth » Version: 0.2.4

cpe:2.3:a:omniauth:omniauth:0.2.4
Omniauth » Omniauth » Version: 0.2.5

cpe:2.3:a:omniauth:omniauth:0.2.5
Omniauth » Omniauth » Version: 0.2.6

cpe:2.3:a:omniauth:omniauth:0.2.6
Omniauth » Omniauth » Version: 0.3.0

cpe:2.3:a:omniauth:omniauth:0.3.0
Omniauth » Omniauth » Version: 0.3.1

cpe:2.3:a:omniauth:omniauth:0.3.1
Omniauth » Omniauth » Version: 0.3.2

cpe:2.3:a:omniauth:omniauth:0.3.2
Omniauth » Omniauth » Version: 1.0.0

cpe:2.3:a:omniauth:omniauth:1.0.0
Omniauth » Omniauth » Version: 1.0.1

cpe:2.3:a:omniauth:omniauth:1.0.1
Omniauth » Omniauth » Version: 1.0.2

cpe:2.3:a:omniauth:omniauth:1.0.2
Omniauth » Omniauth » Version: 1.0.3

cpe:2.3:a:omniauth:omniauth:1.0.3
Omniauth » Omniauth » Version: 1.1.0

cpe:2.3:a:omniauth:omniauth:1.1.0
Omniauth » Omniauth » Version: 1.1.1

cpe:2.3:a:omniauth:omniauth:1.1.1
Omniauth » Omniauth » Version: 1.1.2

cpe:2.3:a:omniauth:omniauth:1.1.2
Omniauth » Omniauth » Version: 1.1.3

cpe:2.3:a:omniauth:omniauth:1.1.3
Omniauth » Omniauth » Version: 1.1.4

cpe:2.3:a:omniauth:omniauth:1.1.4
Omniauth » Omniauth » Version: 1.2.0

cpe:2.3:a:omniauth:omniauth:1.2.0
Omniauth » Omniauth » Version: 1.2.1

cpe:2.3:a:omniauth:omniauth:1.2.1
Omniauth » Omniauth » Version: 1.2.2

cpe:2.3:a:omniauth:omniauth:1.2.2
Omniauth » Omniauth » Version: 1.3.0

cpe:2.3:a:omniauth:omniauth:1.3.0
Omniauth » Omniauth » Version: 1.3.1

cpe:2.3:a:omniauth:omniauth:1.3.1
Omniauth » Omniauth » Version: 1.3.2

cpe:2.3:a:omniauth:omniauth:1.3.2
Omniauth » Omniauth » Version: 1.4.0

cpe:2.3:a:omniauth:omniauth:1.4.0
Omniauth » Omniauth » Version: 1.4.1

cpe:2.3:a:omniauth:omniauth:1.4.1
Omniauth » Omniauth » Version: 1.4.2

cpe:2.3:a:omniauth:omniauth:1.4.2
Omniauth » Omniauth » Version: 1.4.3

cpe:2.3:a:omniauth:omniauth:1.4.3
Omniauth » Omniauth » Version: 1.5.0

cpe:2.3:a:omniauth:omniauth:1.5.0
Omniauth » Omniauth » Version: 1.6.0

cpe:2.3:a:omniauth:omniauth:1.6.0
Omniauth » Omniauth » Version: 1.6.1

cpe:2.3:a:omniauth:omniauth:1.6.1
Omniauth » Omniauth » Version: 1.7.0

cpe:2.3:a:omniauth:omniauth:1.7.0
Omniauth » Omniauth » Version: 1.7.1

cpe:2.3:a:omniauth:omniauth:1.7.1
Omniauth » Omniauth » Version: 1.8.0

cpe:2.3:a:omniauth:omniauth:1.8.0
Omniauth » Omniauth » Version: 1.8.1

cpe:2.3:a:omniauth:omniauth:1.8.1
Omniauth » Omniauth » Version: 1.9.0

cpe:2.3:a:omniauth:omniauth:1.9.0
Omniauth » Omniauth » Version: 2.0.0

cpe:2.3:a:omniauth:omniauth:2.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-36599

Products

Pricing

Contact Us