USN-9085-1: Ruby OpenID vulnerability

It was discovered that Ruby OpenID sent a request to the claimed identifier URL before verifying the signature of an OpenID response. A remote attacker could possibly use this issue to perform server-side request forgery attacks.

Quelle: Originalartikel öffnen