Lucene search
China National Vulnerability DatabaseCNVD-2021-90853HistoryNov 22, 2021 - 12:00 a.m.
Solidus Cross-Site Request Forgery Vulnerability
2021-11-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.001 Low
EPSS
Percentile
47.9%
Solidus is an open source e-commerce system. A cross-site request forgery vulnerability exists in Solidus Solidus_auth_devise, which stems from a lack of CSRF authentication in the product. An attacker could send an unintended request to the server through this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| solidus Solidus >=1.0.0， | lt | 2.5.4 |
Related
osv
osv
Authentication Bypass by CSRF Weakness
2021-11-18 20:09:32
CVE-2021-41274
2021-11-17 20:15:10
github
github
Authentication Bypass by CSRF Weakness
2021-11-18 20:09:32
veracode
veracode
Authentication Bypass
2021-11-18 04:29:28
nvd
nvd
CVE-2021-41274
2021-11-17 20:15:10
cve
cve
CVE-2021-41274
2021-11-17 20:15:10
prion
prion
Cross site request forgery (csrf)
2021-11-17 20:15:00
cvelist
cvelist
CVE-2021-41274 Authentication Bypass by CSRF Weakness
2021-11-17 19:55:11