Lucene search
+L

3 matches found

OSV
OSV
added 2020/08/05 2:53 p.m.28 views

GHSA-W542-CPP9-R3G7 Field Test CSRF vulnerability

The Field Test dashboard is vulnerable to cross-site request forgery CSRF with non-session based authentication methods in versions v0.2.0 through v0.3.2. Impact The Field Test dashboard is vulnerable to CSRF with non-session based authentication methods, like basic authentication. Session-based...

4.3CVSS4.6AI score0.00426EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2020/08/05 2:53 p.m.39 views

Field Test CSRF vulnerability

The Field Test dashboard is vulnerable to cross-site request forgery CSRF with non-session based authentication methods in versions v0.2.0 through v0.3.2. Impact The Field Test dashboard is vulnerable to CSRF with non-session based authentication methods, like basic authentication. Session-based...

4.3CVSS5.2AI score0.00426EPSS
SaveExploits0References5Affected Software1
RubySec
RubySec
added 2020/08/04 12:0 a.m.69 views

CSRF Vulnerability with Non-Session Based Authentication

The Field Test dashboard is vulnerable to CSRF with non-session based authentication methods. Impact The Field Test dashboard is vulnerable to CSRF with non-session based authentication methods, like basic authentication. Session-based authentication methods like Devise's default authentication a...

4.3CVSS2.3AI score0.00426EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder