GHSA-8H2J-CGX8-6XV7 Cross-Site Request Forgery (CSRF) in FastAPI

Impact FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. In versions lower than 0.65.2, FastAPI would try to read the request payload as JSON even if...

accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +332 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: OSV:GHSA-8H2J-CGX8-6XV7...

accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +332 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: GHSA-8H2J-CGX8-6XV7...

Cross-Site Request Forgery (CSRF) in FastAPI

Impact FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. In versions lower than 0.65.2, FastAPI would try to read the request payload as JSON even if...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

DEBIAN-CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

Cross site request forgery (csrf)

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

UBUNTU-CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

PYSEC-2021-100

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +332 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: OSV:PYSEC-2021-100...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677 Cross-Site Request Forgery (CSRF) in FastAPI

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

CVE-2021-32677 affects FastAPI

accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +332 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: MEND:CVE-2021-32677...

CVE-2021-32677: Cross-Site Request Forgery (CSRF)

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

Fastapi-Utils cross-site request forgeing vulnerability

fastapi-utils is a software application. The reusable tool is FastAPI A cross-site request forgery vulnerability exists in fastapi-utils, which stems from the use of cookies for authentication in the path operation of receiving JSON loads from browsers in FastAPI version 0.65.2 and below, making ...