Lucene search
K

CVE-2020-14368

🗓️ 14 Dec 2020 20:05:10Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 51 Views

A flaw in Eclipse Che and CodeReady Workspaces prior to 7.14.0 allows CSRF and cross-site WebSocket hijack via SameSite value not properly set in cookies authentication

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Cross-Site Request Forgery (CSRF) in Eclipse Che
6 Apr 202017:30
githubexploit
Circl
CVE-2020-14368
15 Dec 202000:39
circl
CNNVD
Eclipse Che 跨站请求伪造漏洞
14 Dec 202000:00
cnnvd
CNVD
Eclipse Che Cross-Site Request Forgery Vulnerability (CNVD-2021-14164)
16 Dec 202000:00
cnvd
Cvelist
CVE-2020-14368
14 Dec 202020:05
cvelist
EUVD
EUVD-2020-6509
7 Oct 202500:30
euvd
NVD
CVE-2020-14368
14 Dec 202021:15
nvd
Prion
Cross site request forgery (csrf)
14 Dec 202021:15
prion
NVD
Vulners
Node
eclipsecheRange<7.14.0
[
  {
    "product": "eclipse",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "che-theia 7.14.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation