1 matches found
CSRF vulnerability in warnings allows remote code execution
warnings 5.0.1 and earlier does not require POST requests for a form validation method intended for testing custom warnings parsers, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to execute arbitrary code. warnings 5.0.2 requires POST requests f...
8.8CVSS8.2AI score0.01082EPSS
SaveExploits0Affected Software1
20