Scratchoauth2 Project Scratchoauth2
4 CVEs affecting Scratchoauth2 Project Scratchoauth2. Latest disclosed: 2022-02-15. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-46250 | Critical | 10.0 | 2022-02-15 | An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on dow… |
CVE-2021-29437 | High | 8.0 | 2021-04-13 | ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a… |
CVE-2021-46249 | Medium | 6.5 | 2022-02-15 | An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 all… |
CVE-2021-46251 | Medium | 6.1 | 2022-02-15 | A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute arbitrary web script… |