Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7c8f-c5jx-87w6

Опубликовано: 04 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

EPSS

Процентиль: 32%
0.00127
Низкий

8.8 High

CVSS3

Дефекты

CWE-287
CWE-352

Связанные уязвимости

CVSS3: 8.4
nvd
почти 4 года назад

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

EPSS

Процентиль: 32%
0.00127
Низкий

8.8 High

CVSS3

Дефекты

CWE-287
CWE-352