CVE-2013-4346

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed…

published May 20, 2014

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02429 · 84.1th percentile
Published
2014-05-20T14:00Z
EPSS history
Timeline
  • 20 MAY 14:00Z
    The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed…
    cvelistv5