ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-36599”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-36599
Published
2022-08-18
CVSS:
9.8
ShadowTrackr CVSS:
8.2
Summary:
lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.