CVE-2024-22859

Cross-Site Request Forgery CSRF vulnerability in livewire before v3.0.4, allows remote attackers to execute arbitrary code getCsrfToken function. NOTE: the vendor disputes this because the 5d88731 commit fixes a usability problem HTTP 419 status codes for legitimate client activity, not a securit...

CVE-2024-22859

Cross-Site Request Forgery CSRF vulnerability in livewire before v3.0.4, allows remote attackers to execute arbitrary code getCsrfToken function. NOTE: the vendor disputes this because the 5d88731 commit fixes a usability problem HTTP 419 status codes for legitimate client activity, not a securit...

CVE-2024-22859

CVE-2024-22859 describes a CSRF vulnerability in Livewire prior to 3.0.4 that can allow remote attackers to cause arbitrary code execution via the getCsrfToken function. The issue is supported by multiple sources, including Red Hat, Veracode, OSV, CNNVD, CVE lists, and advisory aggregations, all ...