CVE-2020-28452

This affects the package com.softwaremill.akka-http-session:core2.12 from 0 and before 0.6.1; all versions of package com.softwaremill.akka-http-session:core2.11; the package com.softwaremill.akka-http-session:core2.13 from 0 and before 0.6.1. CSRF protection can be bypassed by forging a request...

PT-2021-11534

Name of the Vulnerable Software and Affected Versions: com.softwaremill.akka-http-session:core 2.12 versions 0 through 0.6.1 com.softwaremill.akka-http-session:core 2.11 versions 0 and later com.softwaremill.akka-http-session:core 2.13 versions 0 through 0.6.1 Description: The issue allows CSRF...

CVE-2020-28452: Cross-Site Request Forgery (CSRF)

This affects the package com.softwaremill.akka-http-session:core2.12 from 0 and before 0.6.1; all versions of package com.softwaremill.akka-http-session:core2.11; the package com.softwaremill.akka-http-session:core2.13 from 0 and before 0.6.1. CSRF protection can be bypassed by forging a request...

CVE-2020-7780: Cross-Site Request Forgery (CSRF)

This affects the package com.softwaremill.akka-http-session:core2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection...

PT-2020-19789

Name of the Vulnerable Software and Affected Versions com.softwaremill.akka-http-session:core 2.13 versions prior to 0.5.11 com.softwaremill.akka-http-session:core 2.12 versions prior to 0.5.11 com.softwaremill.akka-http-session:core 2.11 versions prior to 0.5.11 Description The issue affects old...