Cordea

2 CVEs across 1 Cordea products. Browse Cordea vulnerabilities, severities, and proof-of-concept exploits.

Cordea products with known CVEs

ProductCVEs
Oauth2
Cordea CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-42476Medium6.52024-08-15In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the `state` parameter to prevent cross-site re…
CVE-2024-42475Medium6.52024-08-15In the OAuth library for nim prior to version 0.11, the `state` values generated by the `generateState` function do not have sufficient entropy. These can be s…