EUVD-2022-6261

Malicious code in bioql PyPI...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

Cross site request forgery (csrf)

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The CVE-2020-28191 entry concerns Togglz’s console vulnerability: CSRF in Togglz prior to version 2.9.4. The affected component is the Togglz console; root cause is lack of CSRF protection in the console workflow, enabling cross-site request forgery. The impact is high (as per CVSS 3.1: HIGH/CRIT...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

Togglz 跨站请求伪造漏洞

Togglz is a Java implementation of the Feature Toggles pattern from the Togglz open source. A security vulnerability exists in versions of Togglz prior to 2.9.4 , which stems from a vulnerability in its console that allows an attacker to achieve cross-site request forgery...

Togglz console missing cross-site request forgery (CSRF) protection

Togglz is an implementation of the Feature Toggles pattern for Java. There is no CSRF protection in the togglz console and could allow an attacker to guess the CSRF token value. Version 2.9.4 adds the necessary CSRF protection...

com.breuninger.boot:spring-boot-starter-breuninger-togglz (>=2.0.0 <=2.0.5.RELEASE), com.oneops:secrets-proxy (>=1.2.0 <=1.5.0) +13 more potentially affected by CVE-2020-28191 via org.togglz:togglz-console (>=0.0.1 <=2.8.0)

org.togglz:togglz-console MAVEN version =0.0.1, =2.0.0, =1.2.0, =1.1, =1.0, =0.29.0, =2.1.0, =0.45.0, =0.45.0, =0.45.0, =0.8.0, =0.19.0, =0.8.0, =1.9.0, =2.2.0.Final, =2.8.0 Source cves: CVE-2020-28191 Source advisory: OSV:GHSA-697V-PXG3-J262...

GHSA-697V-PXG3-J262 Togglz console missing cross-site request forgery (CSRF) protection

Togglz is an implementation of the Feature Toggles pattern for Java. There is no CSRF protection in the togglz console and could allow an attacker to guess the CSRF token value. Version 2.9.4 adds the necessary CSRF protection...

PT-2022-8883 · Togglz · Togglz

Name of the Vulnerable Software and Affected Versions: Togglz versions prior to 2.9.4 Description: The issue concerns the lack of CSRF protection in the Togglz console, which could allow an attacker to guess the CSRF token value. This lack of protection makes the console susceptible to Cross-Site...