Cross-Site Request Forgery (CSRF)

🗓️ 15 Feb 2022 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

gitlab

gitlab🔗 gitlab.com👁 19 Views

A CSRF flaw in etcd 3.3.1 and earlier allows attackers to modify keys by sending a POST request

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2018-1099, CVE-2018-1098 may affect IBM CICS TX Advanced	24 Feb 202313:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is susceptible to multiple vulnerabilities due to key-value store "etcd". (CVE-2018-1098, CVE-2018-1099, CVE-2022-34038, CVE-2021-2823).	29 Oct 202409:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in go.etcd.io/etcd package affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:17	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2018-1099, CVE-2018-1098 may affect IBM CICS TX Standard	24 Feb 202313:14	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:36	–	ibm
AstraLinux	Astra Linux - уязвимость в etcd	20 May 202605:53	–	astralinux
ALT Linux	Security fix for the ALT Linux 10 package etcd version 3.4.7-alt1	26 Apr 202000:00	–	altlinux
CVE	CVE-2018-1098	3 Apr 201816:00	–	cve
Cvelist	CVE-2018-1098	3 Apr 201816:00	–	cvelist

Vulners

Node

go v3Range<3.4.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1098
github	www.github.com/coreos/etcd/issues/9353
github	www.github.com/coreos/etcd/commit/a7e5790c82039945639798ae9a3289fe787f5e56
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/
github	www.github.com/advisories/GHSA-5gjm-fj42-x983

15 Feb 2022 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 26.8

CVSS 38.8

EPSS0.01266

csrf etcd post request security flaw key modification