CVEvulnerability

CVE-2022-0916

8.8 HIGH Published 2022-05-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.4 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287, CWE-352

Description

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

Affected configurations

• logitech options (< 9.60.87)

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-352 Cross-Site Request Forgery weakness

References