Filtered by vendor Docile-alligator
Subscriptions
Filtered by product Infinity For Reddit
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-116072 | 1 Docile-alligator | 1 Infinity For Reddit | 2026-10-26 | 5.4 Medium |
| Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the app's client ID with their own Reddit account, then deliver an infinity://localhost redirect containing their code and the constant state, causing the victim's posts, messages, and browsing to occur on the attacker's account. | ||||
Page 1 of 1.