Skip to content
Openid vulnerabilities
Newest
-
openid connect
OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations....
CVE-2025-27370
6.9 Medium
-
diso development team openid
It was found that various OpenID Providers (OPs) had TLS Server Certificates that used weak keys,...
CVE-2008-3280
Public exploit
5.9 Medium
-
openid ruby-openid
ruby-openid SSRF via claimed_id request
CVE-2019-11027
Fix available
9.8 Critical
-
openid connect
Doorkeeper-openid_connect contains Open Redirect
CVE-2019-9837
Fix available
6.1 Medium
-
kay framework project framework, openid openid4java, redhat jboss enterprise application platform +2 more
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
CVE-2011-4314
Fix available
5.8 Medium
-
openid, phpbb +1 more
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB...
CVE-2007-5173
Public exploit
6.8 Medium
-
openid
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the...
CVE-2007-1652
7.5 High
-
openid
Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the...
CVE-2007-1651
6.8 Medium