Cordea Oauth vulnerabilities
- cordea oauth FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider 9.8 Critical
- cordea oauth OAuth: Cross-origin token-request redirects can expose signed request metadata 7.2 High
- cordea oauth, mediawiki +1 more Session fixation attacks on improperly configured OAuth 1.0a tools 0.0 None
- cordea oauth oauth CSRF vulnerability 6.5 Medium
- cordea oauth OAuth library for nim allows insecure generation of state values by generateState - entropy too low and uses regular PRNG instead of CSPRNG 6.5 Medium