CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

creationtimestamp| type| source ---|---|--- 2022-12-27 00:41:00+00:00| seen| https://t.me/cibsecurity/55373...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

com.breuninger.boot:spring-boot-starter-breuninger-togglz (>=2.0.0, <=2.0.5.release), com.oneops:secrets-proxy (>=1.2.0, <=1.5.0) +15 more potentially affected by CVE-2020-28191 via org.togglz:togglz-console (>=0.0.1, <=2.8.0)

org.togglz:togglz-console MAVEN version =0.0.1, =2.0.0, =1.2.0, =1.1, =1.0, =0.29.0, =2.1.0, =0.45.0, =0.45.0, =0.45.0, =0.8.0, =0.19.0, =0.8.0, =1.9.0, =1.17.0 - org.openlmis:openlmis-dhis2-integration 1.2.1 - org.openlmis:openlmis-referencedata 15.7.1 and more Source cves: CVE-2020-28191 Source...

CVE-2020-28191

The CVE-2020-28191 entry concerns Togglz’s console vulnerability: CSRF in Togglz prior to version 2.9.4. The affected component is the Togglz console; root cause is lack of CSRF protection in the console workflow, enabling cross-site request forgery. The impact is high (as per CVSS 3.1: HIGH/CRIT...

com.breuninger.boot:spring-boot-starter-breuninger-togglz (>=2.0.0, <=2.0.5.release), com.oneops:secrets-proxy (>=1.2.0, <=1.5.0) +14 more potentially affected by CVE-2020-28191 via org.togglz:togglz-console (>=2.0.1.final, <=2.8.0)

org.togglz:togglz-console MAVEN version =2.0.1.final, =2.0.0, =1.2.0, =1.1, =1.0, =0.29.0, =2.1.0, =0.45.0, =0.45.0, =0.45.0, =0.8.0, =0.19.0, =0.8.0, =1.9.0, =1.17.0 - org.openlmis:openlmis-dhis2-integration 1.2.1 - org.openlmis:openlmis-referencedata 15.7.1 and more Source cves: CVE-2020-28191...