Omniauth-Oauth2 Project: >> Omniauth-Oauth2 Security Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.
CVSS Score
6.8
EPSS Score
0.001
Published
2013-04-09