Vendor/product archive

lightopenid_project / lightopenid CVEs

Beta · best-effort

1 CVEs tagged to lightopenid_project / lightopenid — 1 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2019-11066

Published May 10, 2019

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1