Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/04 12:00 a.m.•3 views

CVE-2019-1000022: Cross-Site Request Forgery (CSRF)

Taoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery CSRF vulnerability in WebSocket handshake endpoint that can result in CSRF attack, possible leak of anti-CSRF token. This attack appears to be exploitable via malicious request against WebSocket handshake endpoin...

8.8CVSS5.6AI score0.00587EPSS
SaveExploits1References2
Rows per page
Query Builder