Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2013-4562
PUBLISHED
More InfoOfficial Page
Assigner-redhat
Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749
View Known Exploited Vulnerability (KEV) details
Published At-13 May, 2014 | 15:00
Updated At-06 Aug, 2024 | 16:45
Rejected At-
▼CVE Numbering Authority (CNA)

The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://seclists.org/oss-sec/2013/q4/264
mailing-list
x_refsource_MLIST
http://www.osvdb.org/99693
vdb-entry
x_refsource_OSVDB
https://github.com/mkdynamic/omniauth-facebook/commit/ccfcc26fe7e34acbd75ad4a095fd01ce5ff48ee7
x_refsource_CONFIRM
https://groups.google.com/d/msg/ruby-security-ann/-tJHNlTiPh4/9SJxdEWLIawJ
mailing-list
x_refsource_MLIST
http://osvdb.org/ref/99/omniauth-facebook_gem.txt
x_refsource_MISC
http://seclists.org/oss-sec/2013/q4/267
mailing-list
x_refsource_MLIST
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://seclists.org/oss-sec/2013/q4/264
mailing-list
x_refsource_MLIST
x_transferred
http://www.osvdb.org/99693
vdb-entry
x_refsource_OSVDB
x_transferred
https://github.com/mkdynamic/omniauth-facebook/commit/ccfcc26fe7e34acbd75ad4a095fd01ce5ff48ee7
x_refsource_CONFIRM
x_transferred
https://groups.google.com/d/msg/ruby-security-ann/-tJHNlTiPh4/9SJxdEWLIawJ
mailing-list
x_refsource_MLIST
x_transferred
http://osvdb.org/ref/99/omniauth-facebook_gem.txt
x_refsource_MISC
x_transferred
http://seclists.org/oss-sec/2013/q4/267
mailing-list
x_refsource_MLIST
x_transferred
Details not found