VULNERABILITY INTELLIGENCE
CVE-2013-4346
CVSS score4.3 MEDIUM
EPSS probability2.43%
CISA KEVNot currently listed
Published2014-05-20
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.