CVE-2022-39287

tiny-csrf is a Node.js cross site request forgery CSRF protection middleware. In versions prior to 1.1.0 cookies were not encrypted and thus CSRF tokens were transmitted in the clear. This issue has been addressed in commit 8eead6d and the patch with be included in version 1.1.0. Users are advise...

CVE-2022-39287

creationtimestamp| type| source ---|---|--- 2022-10-08 00:17:57+00:00| seen| https://t.me/cibsecurity/51045...

CVE-2022-39287

CVE-2022-39287 affects tiny-csrf, a Node.js CSRF protection middleware. In versions prior to 1.1.0 cookies were not encrypted, causing CSRF tokens to be transmitted in the clear. The issue is addressed in commit 8eead6d, with the patch planned for inclusion in version 1.1.0. Users should upgrade ...

CVE-2022-39287 Plaintext transmission of CSRF tokens in tiny-csrf

tiny-csrf is a Node.js cross site request forgery CSRF protection middleware. In versions prior to 1.1.0 cookies were not encrypted and thus CSRF tokens were transmitted in the clear. This issue has been addressed in commit 8eead6d and the patch with be included in version 1.1.0. Users are advise...