
Cybersecurity
Ruby OpenID Flaw Lets Attackers Forge Server Requests
A vulnerability in Ruby's OpenID library allows attackers to trick a server into making unauthorized requests. This server-side request forgery (SSRF) flaw happens because the library checks a URL before verifying the request's cryptographic signature.
Ubuntu Security Notices3 min read