{"action":"Upgrade omniauth-facebook to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"1.4.1"}],"component":"omniauth-facebook","cve_ids":["CVE-2013-4562"],"ecosystem":"RubyGems","epss":0.01167,"exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-cf36-985g-v73c","id":"tcs_01M5KEJPJY2M16N08F2WP9K6W5","modified_at":"2024-11-30T05:38:59.133292Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-cf36-985g-v73c","https://nvd.nist.gov/vuln/detail/CVE-2013-4562","https://github.com/mkdynamic/omniauth-facebook/commit/ccfcc26fe7e34acbd75ad4a095fd01ce5ff48ee7","https://github.com/mkdynamic/omniauth-faceboo","https://groups.google.com/d/msg/ruby-security-ann/-tJHNlTiPh4/9SJxdEWLIawJ","http://seclists.org/oss-sec/2013/q4/264","http://seclists.org/oss-sec/2013/q4/267"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cf36-985g-v73c","url":"https://osv.dev/vulnerability/GHSA-cf36-985g-v73c"}],"summary":"omniauth-facebook Cross-Site Request Forgery vulnerability"}