Описание
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needed | |
| esm-apps/jammy | not-affected | code not present |
| esm-apps/noble | released | 1.3.0-1ubuntu0.1~esm2 |
| esm-apps/resolute | released | 1.6.7-1ubuntu0.1~esm1 |
| jammy | not-affected | code not present |
| noble | needed | |
| questing | ignored | end of life, was needed |
| resolute | needed | |
| upstream | released | 1.7.0-1 |
Показывать по
EPSS
5.4 Medium
CVSS3
Связанные уязвимости
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vulnerability is fixed in 1.6.11.
Authlib is a Python library which builds OAuth and OpenID Connect serv ...
Authlib: Cross-site request forging when using cache
EPSS
5.4 Medium
CVSS3