12 matches found
CVE-2021-28490
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token...
EUVD-2022-4458
Malicious code in bioql PyPI...
Cross-Site Request Forgery in OWASP CSRFGuard
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token...
CVE-2021-28490
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token...
CVE-2021-28490
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token...
Cross site request forgery (csrf)
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token...
CVE-2021-28490
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token...
CVE-2021-28490
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token...
CVE-2021-28490
In OWASP CSRFGuard (through 3.1.0), a CSRF vulnerability exists where the CSRF cookie can be retrieved using only a session token. This results from the cookie handling logic enabling CSRF token exposure via a session token, enabling CSRF attacks under network conditions with no authentication re...
PT-2021-17867
Name of the Vulnerable Software and Affected Versions: OWASP CSRFGuard versions 3.1.0 and earlier Description: The issue allows for CSRF to occur because the CSRF cookie may be retrieved by using only a session token. Recommendations: For OWASP CSRFGuard versions 3.1.0 and earlier, at the moment,...
Owasp CSRFGuard 跨站请求伪造漏洞
Owasp CSRFGuard is a library from the OWASP Owasp Foundation in the United States that implements a variant of the Synchronizer Token Mode to mitigate the risk of cross-site request forgery CSRF attacks. A cross-site request forgery CSRF vulnerability exists in OWASP CSRFGuard 3.1.0 and earlier...
