[CVE-2026-48612] Improper state verification in the OAuth implementation could allow an attacker to manipulate the au…

Descripción técnica

Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked to an attacker-controlled account. This can result in unauthorized account linking and potential account takeover.

Puntuación CVSS

Score: 8/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Debilidades (CWE)

CWE-352

Fuente oficial

Publicado en NIST NVD.