CVE-2021-28490

2021-08-1919:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.1%

In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.

CPENameOperatorVersion
www-project-csrfguardeq3.1.0

CPE	Name	Operator	Version
	www-project-csrfguard	eq	3.1.0

References

github.com/reidmefirst/vuln-disclosure/blob/main/2021-01.txt

owasp.org/www-project-csrfguard/