CVE-2013-4346

CVE-2013-4346 describes a replay attack vulnerability in the Server.verify_request function of SimpleGeo python-oauth2, also affecting urbanairship python-oauth2. The flaw stems from the function's failure to check the nonce, allowing remote attackers to reuse signed URLs. With a CVSS score of 4.3, this vulnerability has a network attack vector and medium complexity, potentially leading to partial integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.