Lucene search
+L

4 matches found

OSV
OSV
•added 2017/11/30 2:29 p.m.•34 views

CVE-2017-12631

Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF Cross Style Request Forgery style vulnerability has been found in the Spring 2, Spring 3 and Spring 4 plugins in versions before 1.4.3 and 1.3.3. The vulnerability can result in a...

8.8CVSS6.9AI score
SaveExploits0References9
Prion
Prion
•added 2017/11/30 2:29 p.m.•23 views

Cross site request forgery (csrf)

Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF Cross Style Request Forgery style vulnerability has been found in the Spring 2, Spring 3 and Spring 4 plugins in versions before 1.4.3 and 1.3.3. The vulnerability can result in a...

6.8CVSS8.6AI score0.01609EPSS
SaveExploits3References9Affected Software1
Cvelist
Cvelist
•added 2017/11/30 2:00 p.m.•53 views

CVE-2017-12631

Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF Cross Style Request Forgery style vulnerability has been found in the Spring 2, Spring 3 and Spring 4 plugins in versions before 1.4.3 and 1.3.3. The vulnerability can result in a...

8.7AI score0.01609EPSS
SaveExploits3References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/30 12:00 a.m.•4 views

CVE-2017-12631: Cross-Site Request Forgery (CSRF)

Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF Cross Style Request Forgery style vulnerability has been found in the Spring 2, Spring 3 and Spring 4 plugins in versions before 1.4.3 and 1.3.3. The vulnerability can result in a...

8.8CVSS7.4AI score0.01609EPSS
SaveExploits3References2
Rows per page
Query Builder