Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-89156
HistoryNov 16, 2021 - 12:00 a.m.

Twill Cross-Site Request Forgery Vulnerability

2021-11-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
twill
cross-site request forgery
vulnerability
laravel cms
authentication
attack

EPSS

0.001

Percentile

31.0%

Twill is an open source Cms toolkit for Laravel. It is used to help developers quickly create intuitive, powerful and flexible custom management console. twill cross-site request forgery vulnerability, the vulnerability stems from the software in the login authentication process using get requests instead of post requests, an attacker can use the vulnerability to launch cross-site request forgery attacks.

EPSS

0.001

Percentile

31.0%