mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 15:15:46 +02:00
730 B
730 B
CVE-2012-6134
Description
Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.
POC
Reference
- https://github.com/intridea/omniauth-oauth2/pull/25
- https://github.com/intridea/omniauth-oauth2/pull/25
Github
No PoCs found on GitHub currently.