Lucene search
+L

2 matches found

OSV
OSV
•added 2019/11/28 5:15 p.m.•15 views

CVE-2019-19375

In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. The fix for this was backported to LTS versions 2019.6.14 and 2019.9.8...

5.3CVSS6.1AI score0.00421EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/28 12:00 a.m.•2 views

CVE-2019-19375: Cross-Site Request Forgery (CSRF)

In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. The fix for this was backported to LTS versions 2019.6.14 and 2019.9.8...

5.3CVSS5.9AI score0.00421EPSS
SaveExploits0References2
Rows per page
Query Builder