CVE

Id
64509  
CVE No.
CVE-2013-4562  
Status
Candidate  
Description
The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635838 64509 CVE-2013-4562 MLIST:[oss-security] 20131112 CVE request: rubygem omniauth-facebook CSRF vurnerability  View
635839 64509 CVE-2013-4562 URL:http://seclists.org/oss-sec/2013/q4/264  View
635840 64509 CVE-2013-4562 MLIST:[oss-security] 20131112 Re: Re: CVE request: rubygem omniauth-facebook CSRF vurnerability  View
635841 64509 CVE-2013-4562 URL:http://seclists.org/oss-sec/2013/q4/267  View
635842 64509 CVE-2013-4562 MLIST:[ruby-security-ann] 20131114 [CVE-2013-4562] RubyGem omniauth-facebook CSRF vulnerability  View
635843 64509 CVE-2013-4562 URL:https://groups.google.com/d/msg/ruby-security-ann/-tJHNlTiPh4/9SJxdEWLIawJ  View
635844 64509 CVE-2013-4562 MISC:http://osvdb.org/ref/99/omniauth-facebook_gem.txt  View
635845 64509 CVE-2013-4562 CONFIRM:https://github.com/mkdynamic/omniauth-facebook/commit/ccfcc26fe7e34acbd75ad4a095fd01ce5ff48ee7  View
635846 64509 CVE-2013-4562 OSVDB:99693  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23957 JVNDB-2013-005532 MediaWiki の Sanitizer::checkCss におけるクロスサイトスクリプティングの脆弱性 MediaWiki の Sanitizer::checkCss には、不完全なブラックリストにより、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2013-4567 64509 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005532.html  View