Authentication Vulnerability in OmniAuth by OmniAuth
CVE-2017-18076

7.5HIGH

Key Information:

Vendor

Omniauth

Status
Omniauth
Vendor
CVE Published:
26 January 2018

What is CVE-2017-18076?

A vulnerability exists in OmniAuth prior to version 1.3.2, where the authenticity_token value is insufficiently protected. This issue arises because both POST and GET parameters are stored in the session. When the callback phase is executed, sensitive data can be exposed, potentially leading to session hijacking attacks and unauthorized access.

References

https://github.com/omniauth/omniauth/pull/867
x_refsource_CONFIRM
https://www.debian.org/security/2018/dsa-4109
vendor-advisoryx_refsource_DEBIAN
https://bugs.debian.org/888523
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.