ADVISORIES

• CVE-2017-18076 (NVD)
• GHSA-9pr6-grf4-x2fr
• Vendor Advisory

GEM

omniauth

SEVERITY

CVSS v3.x: 7.5 (High)

CVSS v2.0: 6.8 (Medium)

PATCHED VERSIONS

• >= 1.3.2

DESCRIPTION

In strategy.rb in OmniAuth before 1.3.2, the authenticity_token value is improperly protected because POST (in addition to GET) parameters are stored in the session and become available in the environment of the callback phase.

RELATED

• https://nvd.nist.gov/vuln/detail/CVE-2017-18076