{"action":"Upgrade omniauth-facebook to 1.5.1 or later.","affected":[{"fixed":"1.5.1","introduced":"0"}],"component":"omniauth-facebook","cve_ids":["CVE-2013-4593"],"ecosystem":"RubyGems","epss":0.01753,"exploited":false,"fixed_versions":["1.5.1"],"ghsa_id":"GHSA-33vg-hpx5-pfxg","id":"tcs_01M5KEG5N0QVR1B8TF28A9TA6E","modified_at":"2023-11-08T03:57:24.018018Z","published_at":"2022-05-05T00:29:10Z","references":["https://osv.dev/vulnerability/GHSA-33vg-hpx5-pfxg","https://nvd.nist.gov/vuln/detail/CVE-2013-4593","https://github.com/simi/omniauth-facebook/commit/115c0a768cd6f4b9bfae8900f8e3fc4fbeec3ad8","https://exchange.xforce.ibmcloud.com/vulnerabilities/89040","https://github.com/simi/omniauth-facebook","https://security-tracker.debian.org/tracker/CVE-2013-4593","http://www.openwall.com/lists/oss-security/2013/11/18/6"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-33vg-hpx5-pfxg","url":"https://osv.dev/vulnerability/GHSA-33vg-hpx5-pfxg"}],"summary":"omniauth-facebook Improper Authentication vulnerability"}