Description (CNA)
Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mage / mage-ai | affected 0 through 0.9.80 |
CWE
CWE-390
References
- https://github.com/mage-ai/mage-ai/pull/6204
- https://github.com/mage-ai/mage-ai/pull/6205
- https://github.com/mage-ai/mage-ai/pull/6204/changes/76c4f467f3654041d8899b1c4447a985710d26c0
- https://thecoregroup.net/category/the-core-group/
ADP enrichment
No English description supplied.
No references supplied.