OAuth Single Sign On – SSO (OAuth Client) Premium < 38.4.9 – IdP Deletion via CSRF
Discription
The plugin does not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attackRead More
References
Back to Main
