CVE-2022-28108

Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...

Exploit for Cross-Site Request Forgery (CSRF) in Selenium Selenium_Grid

Selenium Chrome RCE Exploit Extended This repository conta...

Selenium chrome RCE

Selenium Server Grid before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain. Module Options msf use exploit/linux/http/seleniumgreedchromercecve202228108 msf exploitseleniumgreedchromercecve20222810...

br.com.arsmachina:tapestry-url-rewriter (>=1.0.1, <=2.0.0), net.thucydides.easyb:thucydides-easyb-plugin (>=0.4.32, <=0.4.34) +6 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.14.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - br.com.arsmachina:tapestry-url-rewriter =1.0.1, =0.4.32, =0.4.31, =0.4.31,...

com.crawljax.plugins:crawljax-plugins-parent (>=3.5, <=3.5.1), com.crawljax.plugins:crawloverview-plugin (>=3.5, <=3.5.1) +87 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (>=4.0.0-alpha-1, <=4.0.0-alpha-2)

org.seleniumhq.selenium:selenium-server MAVEN version =4.0.0-alpha-1, =3.5, =3.5, =3.5, =3.5, =3.3, =3.5, =3.5, =3.5, =1.0.1, =1.0.1, =1.1.4, =1.0.0, =1.1.1, =4.0.0-alpha-4.0, =4.0.0-rc-1.0 and more Source cves: CVE-2022-28108 Source advisory: OSV:GHSA-H2RR-M97P-6JQ9...

com.actiontestscript:ats-automated-testing (>=1.1.6, <=1.3.1), com.github.invictum:serenity-reportportal-integration (>=1.1.1, <=1.1.2) +59 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (3.11.0)

org.seleniumhq.selenium:selenium-server MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.actiontestscript:ats-automated-testing =1.1.6, =1.1.1, =1.0.16, =1.0.16,...

com.aimmac23:selenium-video-node (2.0) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (3.0.0-beta4)

org.seleniumhq.selenium:selenium-server MAVEN version 3.0.0-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.aimmac23:selenium-video-node 2.0 Source cves: CVE-2022-28108 Source...

com.google.code.narcissus-webtests:narcissus-core (0.9.6), com.google.code.narcissus-webtests:narcissus-core-integration-tests (0.9.6) +7 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.19.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.google.code.narcissus-webtests:narcissus-core 0.9.6 -...

com.nhncorp.ntaf:ntaf-core (>=20100730, <=20101008-p1) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0a4)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.nhncorp.ntaf:ntaf-core =20100730, =20101008-p1 Source cves: CVE-2022-28108...

org.jboss.arquillian.extension:arquillian-drone (1.0.0.alpha5), org.seleniumhq.selenium:selenium (2.0b2) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0b2)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - org.jboss.arquillian.extension:arquillian-drone 1.0.0.alpha5 -...

net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.2.1, <=0.2.2), net.thucydides:thucydides-core (>=0.2.1, <=0.2.2) +5 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0rc2)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.maven.plugins:maven-thucydides-plugin =0.2.1, =0.2.1, =0.2.1,...

net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.2.7, <=0.2.8), net.thucydides:thucydides-core (>=0.2.7, <=0.2.8) +1 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.1.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.maven.plugins:maven-thucydides-plugin =0.2.7, =0.2.7, =0.2.7, =0.2...

org.e-hoffman.testing:webdrivermodule (1.2.0) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.11.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - org.e-hoffman.testing:webdrivermodule 1.2.0 Source cves: CVE-2022-28108 Source...

net.thucydides.easyb:thucydides-easyb-plugin (>=0.4.29, <=0.4.30), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.4.28, <=0.4.30) +4 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.13.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin =0.4.29, =0.4.28, =0.4.28, =0.4.28,...

net.thucydides.easyb:thucydides-easyb-plugin (0.6.3), net.thucydides.maven.plugins:maven-thucydides-plugin (0.6.3) +5 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.16.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin 0.6.3 -...

com.xebia.incubator:xebium (0.6) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.16.1)

org.seleniumhq.selenium:selenium-server MAVEN version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.xebia.incubator:xebium 0.6 Source cves: CVE-2022-28108 Source advisory:...

net.thucydides.easyb:thucydides-easyb-plugin (>=0.7.1, <=0.7.6), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.7.1, <=0.7.6) +2 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.18.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin =0.7.1, =0.7.1, =0.7.1, =0.7.1,...

net.thucydides.easyb:thucydides-easyb-plugin (>=0.8.25, <=0.8.31), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.8.25, <=0.9.0-beta-2) +3 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.23.1)

org.seleniumhq.selenium:selenium-server MAVEN version 2.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin =0.8.25, =0.8.25, =0.8.25,...

com.btmatthews.selenium.junit4:selenium-junit4-runner (1.0.3), com.daveayan:gherkinsalad (>=1.0, <=1.5) +17 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.25.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.btmatthews.selenium.junit4:selenium-junit4-runner 1.0.3 -...

com.daveayan:gherkinsalad (>=1.6, <=2.0), com.daveayan:gherkinsalad.cucumber (>=1.6, <=2.0) +12 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.28.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.daveayan:gherkinsalad =1.6, =1.6, =1.6, =1.6, =1.6, =1.0.1, =3.0.11, =3.1.2 ...