Omniauth-facebook (Madeofcode) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2014-05-13. Vendor: Madeofcode.

CVEs of Omniauth-facebook

• CVE-2013-4562 - CVSS 6.8 (medium), 2014-05-13: The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request…