# Omniauth-facebook CSRF vulnerability

**URL:** <https://www.ruby-forum.com/t/omniauth-facebook-csrf-vulnerability/237487>\
**Category:** IT\
**Created:** [November 15, 2013, 6:09pm UTC](https://www.ruby-forum.com/t/omniauth-facebook-csrf-vulnerability/237487 "2013-11-15T18:09:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Detlef\_R](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/58f4c7/32.png) [@Detlef\_R](https://www.ruby-forum.com/u/Detlef_R)\
**Post date:** [November 15, 2013, 6:09pm UTC](https://www.ruby-forum.com/t/omniauth-facebook-csrf-vulnerability/237487/1 "2013-11-15T18:09:45Z")

</div>

Hanno trovato una vulnerabilità in questa gemma. Se qualcuno la usa ne  
faccia l’aggiornamento alla 1.5.0

[http://www.openwall.com/lists/oss-security/2013/11/12/5](http://www.openwall.com/lists/oss-security/2013/11/12/5)

---

<div class="post-metadata">

**Author:** ![pm3](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/a87d85/32.png) [@pm3](https://www.ruby-forum.com/u/pm3)\
**Post date:** [November 15, 2013, 6:45pm UTC](https://www.ruby-forum.com/t/omniauth-facebook-csrf-vulnerability/237487/2 "2013-11-15T18:45:58Z")

</div>

Grazie Mille!

Daniele.

Il giorno 15 novembre 2013 18:09, Paolo M.  
[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)ha scritto:

---

<div class="post-metadata">

**Author:** ![pm3](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/p/a87d85/32.png) [@pm3](https://www.ruby-forum.com/u/pm3)\
**Post date:** [November 25, 2013, 9:01am UTC](https://www.ruby-forum.com/t/omniauth-facebook-csrf-vulnerability/237487/3 "2013-11-25T09:01:10Z")

</div>

grazie!

Alessandro R.

2013/11/15 Daniele P. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)