VULNERABILITY INTELLIGENCE

CVE-2022-0916

CVSS score8.4 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2022-05-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

Weakness classification

  • cve-coordination@logitech.com: CWE-287
  • nvd@nist.gov: CWE-352

Primary references