Lucene search

K
osvGoogleOSV:GHSA-6JMH-9GQM-5XRX
HistoryJan 26, 2022 - 8:21 p.m.

Cross-Site Request Forgery (CSRF) in livehelperchat

2022-01-2620:21:03
Google
osv.dev
30

0.001 Low

EPSS

Percentile

30.0%

A CSRF issue is found in the audit configuration under settings. It was found that no CSRF token validation is getting done on the server-side. If we remove the CSRF token and keep the CSRF token field empty, the action is getting performed.

0.001 Low

EPSS

Percentile

30.0%

Related for OSV:GHSA-6JMH-9GQM-5XRX