medium5.3
CVE-2026-31381
An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.
Impact
An attacker can extract user email addresses (PII) exposed in base64 encoding via the state parameter in the OAuth callback URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gainsight | Assist | All versions |