EUVD-2024-49601

Malicious code in bioql PyPI...

CVE-2024-8647: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hosted installs, it was possible to leak the anti-CSRF-token to an external site while the Harbor integration was enabled...

CVE-2019-1000022: Cross-Site Request Forgery (CSRF)

Taoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery CSRF vulnerability in WebSocket handshake endpoint that can result in CSRF attack, possible leak of anti-CSRF token. This attack appears to be exploitable via malicious request against WebSocket handshake endpoin...

PT-2019-11270

Name of the Vulnerable Software and Affected Versions: Taoensso Sente versions prior to 1.14.0 Description: The issue is related to a Cross Site Request Forgery CSRF vulnerability in the WebSocket handshake endpoint. This can result in a CSRF attack and a possible leak of the anti-CSRF token. The...