https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:17:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-267201 EUVD-2026-267201 https://cve.radiocsirt.org/vuln/euvd-2026-267201 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25221 <p>PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, the OAuth 2.0 implementation for GitHub and Google login providers is vulnerable to Login Cross-Site Request Forgery (CSRF). The application fails to implement and verify the state parameter during the authentication flow. This allows an attacker to pre-authenticate a session and trick a victim into logging into the attacker&#39;s account. Any data the victim then enters or academic progress they make is stored on the attacker&#39;s account, leading to data loss for the victim and information disclosure to the attacker.</p> <p>PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, the OAuth 2.0 implementation for GitHub and Google login providers is vulnerable to Login Cross-Site Request Forgery (CSRF). The application fails to implement and verify the state parameter during the authentication flow. This allows an attacker to pre-authenticate a session and trick a victim into logging into the attacker&#39;s account. Any data the victim then enters or academic progress they make is stored on the attacker&#39;s account, leading to data loss for the victim and information disclosure to the attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25221