Vulnerabilities > Lightopenid Project

DATE CVE VULNERABILITY TITLE RISK
2019-05-10 CVE-2019-11066 Server-Side Request Forgery (SSRF) vulnerability in Lightopenid Project Lightopenid 1.3.0/1.3.1
openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method.
network
low complexity
lightopenid-project CWE-918
7.5