CVE-2024-21632
1 advisory.
RubyGems/omniauth-microsoft_graph CVE-2024-21632: high 8.6, EPSS 0.90%
Omniauth::MicrosoftGraph Account takeover (nOAuth)
Action: Upgrade omniauth-microsoft_graph to 2.0.0 or later.
bundle update omniauth-microsoft_graphAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-5g66-628f-7cvj
- https://github.com/synth/omniauth-microsoft_graph/security/advisories/GHSA-5g66-628f-7cvj
- https://nvd.nist.gov/vuln/detail/CVE-2024-21632
- https://github.com/synth/omniauth-microsoft_graph/commit/5ffd62690ca0e46978f2fc7d83b18d28edde7795
- https://github.com/synth/omniauth-microsoft_graph/commit/f132078389612b797c872b45bd0e0b47382414c1
- https://github.com/synth/omniauth-microsoft_graph
- https://www.descope.com/blog/post/noauth
CVE-2024-21632 · published · modified · JSON