Threats tagged 'ghsa-cr46-5p72-vh72'

Laravel Socialite's Facebook provider has an authentication bypass vulnerability due to missing nonce claim validation in the getUserByOIDCToken() function. This flaw allows attackers to replay captured valid OIDC id_tokens issued for the same Facebook App ID, bypassing authentication controls and gaining unauthorized access to victim accounts. The vulnerability affects versions prior to 5.29.0.