86 matches found
PT-2017-8695
Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 0.9.35 Description The issue makes it easier for remote attackers to guess the password reset token by predicting a value, as the software uses the PHP rand function for random number generation. Recommendations For...
MySQL Enterprise Monitor < 2.3.20 Apache Struts Predictable Token XSRF
According to its self-reported version, the MySQL Enterprise Monitor running on the remote host may be affected by a cross-site request forgery vulnerability due to the token generator failing to adequately randomize the token values. A remote attacker can exploit this by extracting a token from ...
CVE-2014-7809
Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable values, which allows remote attackers to bypass the CSRF protection mechanism...
Cross site request forgery (csrf)
Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable values, which allows remote attackers to bypass the CSRF protection mechanism...
