82 matches found
CVE-2021-43188
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...
CVE-2021-43189
In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...
CVE-2021-43188
CVE-2021-43188 : JetBrains YouTrack Mobile prior to 2021.2 has incomplete protection of access tokens on iOS. The issue is documented in the JetBrains Security Bulletin Q3-2021 under YouTrack Mobile (incomplete access tokens protection on iOS) and resolved in 2021.2. The connected documents do no...
CVE-2021-43189
CVE-2021-43189 affects JetBrains YouTrack Mobile. The connected data confirms that before version 2021.2, access token protection on Android was incomplete, enabling potential information exposure. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) corresponds to a base score of 7.3 (HIGH...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...
CVE-2021-43188: Undefined Security Weakness
In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...
CVE-2021-43189: Undefined Security Weakness
In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...
DRUPAL-CONTRIB-2021-040
This module provides an admin interface for creating drop down menus that combine Drupal menu items with rich media content. The module does not use CSRF tokens to protect routes for saving menu configurations. This vulnerability can be exploited by an anonymous user...
CVE-2020-27831
A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository email notifications. This flaw allows an attacker to add email addresses they do not own to repository notifications...
CVE-2021-32403
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...
CVE-2021-32403
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...
Cross site request forgery (csrf)
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...
CVE-2021-32403: Cross-Site Request Forgery (CSRF)
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...
e107 跨站请求伪造漏洞
e107 is an open source, free and PHP and MySQL based Content Management System CMS from the E107 team. The system supports a variety of plug-ins and appearance themes, and can be used as a personal blog, discussion community, archive repository and so on. A cross-site request forgery vulnerabilit...
PT-2021-17645 · E107 · E107
Name of the Vulnerable Software and Affected Versions: e107 versions 2.3.0 and earlier Description: The issue is related to the lack of a certain e TOKEN protection mechanism in the usersettings.php file. This affects the security of the software. Recommendations: For versions 2.3.0 and earlier,...
CVE-2021-21241
The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. In Flask-Security-Too from version 3.3.0 and before version 3.4.5, the /login and...
Softwaremill Akka-http-session Cross-Site Request Forgery Vulnerability
Softwaremill Softwaremill Akka-http-session is a codebase for providing continuous JWT and continuous connection support for single page or mobile applications from Softwaremill, Poland. A security vulnerability exists in com.softwaremill.akka-http-session:core2.13, which stems from the fact that...
CVE-2020-12257
rConfig 3.9.4 is vulnerable to cross-site request forgery CSRF because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form add a user, delete a user, or edit a user...
