CVE-2022-28108

Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...

Exploit for Cross-Site Request Forgery (CSRF) in Selenium Selenium_Grid

Selenium Chrome RCE Exploit Extended This repository conta...

Selenium chrome RCE

Selenium Server Grid before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain. Module Options msf use exploit/linux/http/seleniumgreedchromercecve202228108 msf exploitseleniumgreedchromercecve20222810...

CVE-2022-28108

creationtimestamp| type| source ---|---|--- 2022-04-19 07:23:25+00:00| seen| https://t.me/cibsecurity/41084 2025-01-07 10:17:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/seleniumgreedchromercecve202228108.rb 2025-01-08 12:52:55+00:00| seen...

CVE-2022-28108

CVE-2022-28108: Selenium Server (Grid) CSRF in versions before 4.0.0-alpha-7 arises because the server accepts non-JSON content types (e.g., text/plain, application/x-www-form-urlencoded, multipart/form-data) for requests. The vulnerability can be triggered via crafted requests (e.g., to /wd/hub/...