Lucene search
+L

1 matches found

OSV
OSV
added 2024/09/25 6:21 p.m.84 views

GHSA-79GP-Q4WV-33FR Cross-Site Request Forgery (CSRF) in strawberry-graphql

Impact Multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable to CSRF attacks if users did not explicitly enable CSRF preventing security...

4.8CVSS6AI score0.0023EPSS
SaveExploits0References6
Rows per page
Query Builder