CVE:CVE-2013-4593
CNNVD:CNNVD-201912-510
RubyGem omniauth-facebook中存在授权问题漏洞，该漏洞源于程序没有正确在URL中传递访问令牌。远程攻击者可利用该漏洞以其他用户身份进行身份验证。
solution:Upgrade omniauth-facebook_project omniauth-facebook to a higher version than 1.5.0,and avoid the version (,1.5.0]