Lucene search

K
osvGoogleOSV:GHSA-FGJH-X3F8-8GMH
HistoryMay 24, 2022 - 4:50 p.m.

Mirumee Saleor CSRF Protection Disabled

2022-05-2416:50:13
Google
osv.dev
6
mirumee saleor
2.7.0
csrf protection

EPSS

0.001

Percentile

31.5%

In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server.

EPSS

0.001

Percentile

31.5%

Related for OSV:GHSA-FGJH-X3F8-8GMH