Lucene search

K
cvelistMitreCVELIST:CVE-2018-16832
HistorySep 11, 2018 - 1:00 p.m.

CVE-2018-16832

2018-09-1113:00:00
mitre
www.cve.org

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

Related for CVELIST:CVE-2018-16832