[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUea1a66y1-K_ES4dLhW2fOtKTtt4CotLgBoXBw76SIw":3,"g5a-risk:CVE-2017-18076":128},{"success":4,"data":5,"meta":126},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":55,"references":56,"referencesCount":74,"weaknesses":75,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":26,"otxData":26,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":124,"notableEvents":125},"CVE-2017-18076","What is CVE-2017-18076?","In strategy.rb in OmniAuth before 1.3.2, the authenticity_token value is improperly protected because POST (in addition to GET) parameters are stored in the session and become available in the environment of the callback phase.","In strategy.rb in OmniAuth before 1.3.2, the authenticity_token value is improperly protected because POST (in addition to GET) parameters are stored in the ...","2018-01-26T19:29:00.26","2019-10-03T00:03:26.223",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.02129,[39,39,39,39,39,39,39],"High",[43,47,52],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"omniauth","*","cpe:2.3:a:omniauth:omniauth:*:*:*:*:*:ruby:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",3,[57,63,68,71],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fbugs.debian.org\u002F888523","Debian",[61,62],"Issue Tracking","Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002Fomniauth\u002Fomniauth\u002Fpull\u002F867","GitHub",[67,62],"Patch",{"url":69,"source":65,"tags":70},"https:\u002F\u002Fgithub.com\u002Fomniauth\u002Fomniauth\u002Fpull\u002F867\u002Fcommits\u002F71866c5264122e196847a3980c43051446a03e9b",[67,62],{"url":72,"source":59,"tags":73},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4109",[62],4,[76],{"id":77,"name":77,"description":78},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2017-18076? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-18076, a high severity cyber security vulnerability from 2018. In strategy.rb in OmniAuth before 1.3.2, the authenticity_t...","CVE-2017-18076, CVE-2017-18076 vulnerability, CVE-2017-18076 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, omniauth security, debian security, omniauth vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-18076",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-18076","Cybersecurity","CVE-2017-18076, CVE-2017-18076 vulnerability, CVE-2017-18076 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108,116],{"Operator":26,"Negate":26,"Nodes":109},[110],{"Operator":111,"Negate":26,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":115,"VersionEndIncluding":26},"AFDEE807-A6D6-408A-B8A3-972813FAA318","1.3.2",{"Operator":26,"Negate":26,"Nodes":117},[118],{"Operator":111,"Negate":26,"CPEMatch":119},[120,122],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":127,"version":32},1792361849517,{"score":129,"band":130,"action":131,"scoredAt":132},47,"Medium","Plan remediation","2026-10-16T06:43:20.330718+00:00"]