accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +333 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: OSV:GHSA-8H2J-CGX8-6XV7...

accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +333 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: GHSA-8H2J-CGX8-6XV7...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

DEBIAN-CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +333 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: OSV:PYSEC-2021-100...

Cross site request forgery (csrf)

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

UBUNTU-CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

PYSEC-2021-100

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

accidental-vulnerability (>=2.0.4, <=3.0.0), agrothon (>=1.1.5, <=1.3.2) +333 more potentially affected by CVE-2021-32677 via fastapi (>=0.1.17, <=0.65.1)

fastapi PYPI version =0.1.17, =2.0.4, =1.1.5, =0.1.0, =0.1.0, =0.0.2, =0.1.7, =0.1.39, =0.1.21, =0.1.0, =19.1.2, =0.0.3, =0.0.5 and more Source cves: CVE-2021-32677 Source advisory: MEND:CVE-2021-32677...

CVE-2021-32677

CVE-2021-32677 affects FastAPI

CVE-2021-32677

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677 Cross-Site Request Forgery (CSRF) in FastAPI

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

CVE-2021-32677: Cross-Site Request Forgery (CSRF)

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

Fastapi-Utils cross-site request forgeing vulnerability

fastapi-utils is a software application. The reusable tool is FastAPI A cross-site request forgery vulnerability exists in fastapi-utils, which stems from the use of cookies for authentication in the path operation of receiving JSON loads from browsers in FastAPI version 0.65.2 and below, making ...

PT-2021-4289 · Fastapi +1 · Fastapi +1

Name of the Vulnerable Software and Affected Versions: FastAPI versions prior to 0.65.2 Description: The issue is related to a Cross-Site Request Forgery CSRF attack in FastAPI, a web framework for building APIs with Python. In versions lower than 0.65.2, FastAPI would try to read the request...

Fedora: Security Advisory for python-fastapi (FEDORA-2021-e7fabd81fb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...