CVE-2022-34155

概要

参考情報

• lana.codes/lanavdb/071fa6eb-2e54-43a1-b37f-1e562988b7d4 · Exploit
• patchstack.com/database/vulnerability/miniorange-login-with-eve-online-google-facebook/wordpress-oauth-single-sign-on-sso-oauth-client-plugin-6-23-3-broken-authentication-vulnerability · Third Party Advisory

oauth single sign on のその他の脆弱性

• CVE-2023-1093中 6.5The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allo…
• CVE-2023-1092中 6.5The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sig…
• CVE-2022-2133中 5.3The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attac…