GHSA-H2RR-M97P-6JQ9 Selenium Server (Grid) CSRF

Selenium Server Grid before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...

com.jolira:jolirium (1.0.2) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0a2)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0a2 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.jolira:jolirium 1.0.2 Source cves: CVE-2022-28108 Source advisory:...

com.nhncorp.ntaf:ntaf-core (>=20100730, <=20101008-p1) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0a4)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0a4 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.nhncorp.ntaf:ntaf-core =20100730, =20101008-p1 Source cves: CVE-2022-28108...

org.jboss.arquillian.extension:arquillian-drone (1.0.0.alpha5), org.seleniumhq.selenium:selenium (2.0b2) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0b2)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - org.jboss.arquillian.extension:arquillian-drone 1.0.0.alpha5 -...

com.saucelabs.selenium:demo-project (>=2.0, <=2.2), com.saucelabs.selenium:selenium-embedded-rc-driver (>=2.0, <=2.2) +1 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0b3)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.saucelabs.selenium:demo-project =2.0, =2.0, =2.2 -...

net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.2.1, <=0.2.2), net.thucydides:thucydides-core (>=0.2.1, <=0.2.2) +5 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0rc2)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.maven.plugins:maven-thucydides-plugin =0.2.1, =0.2.1, =0.2.1,...

net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.2.7, <=0.2.8), net.thucydides:thucydides-core (>=0.2.7, <=0.2.8) +1 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.1.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.maven.plugins:maven-thucydides-plugin =0.2.7, =0.2.7, =0.2.7, =0.2...

br.eti.kinoshita:selenium2-base (0.1) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.4.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - br.eti.kinoshita:selenium2-base 0.1 Source cves: CVE-2022-28108 Source advisory:...

net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.4.8, <=0.4.12), net.thucydides.plugins.jira:thucydides-jira-plugin (>=0.5.2, <=0.5.3) +2 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.6.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.maven.plugins:maven-thucydides-plugin =0.4.8, =0.5.2, =0.4.8,...

org.e-hoffman.testing:webdrivermodule (1.2.0) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.11.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - org.e-hoffman.testing:webdrivermodule 1.2.0 Source cves: CVE-2022-28108 Source...

net.thucydides.easyb:thucydides-easyb-plugin (>=0.4.29, <=0.4.30), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.4.28, <=0.4.30) +4 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.13.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin =0.4.29, =0.4.28, =0.4.28, =0.4.28,...

net.thucydides.easyb:thucydides-easyb-plugin (0.6.3), net.thucydides.maven.plugins:maven-thucydides-plugin (0.6.3) +5 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.16.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin 0.6.3 -...

com.xebia.incubator:xebium (0.6) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.16.1)

org.seleniumhq.selenium:selenium-server MAVEN version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.xebia.incubator:xebium 0.6 Source cves: CVE-2022-28108 Source advisory:...

net.thucydides.easyb:thucydides-easyb-plugin (>=0.7.1, <=0.7.6), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.7.1, <=0.7.6) +2 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.18.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin =0.7.1, =0.7.1, =0.7.1, =0.7.1,...

com.jolira:jolirium (1.1.1), net.thucydides.easyb:thucydides-easyb-plugin (>=0.8.21, <=0.8.24) +3 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.22.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.jolira:jolirium 1.1.1 - net.thucydides.easyb:thucydides-easyb-plugin =0.8.21...

net.thucydides.easyb:thucydides-easyb-plugin (>=0.8.25, <=0.8.31), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.8.25, <=0.9.0-beta-2) +3 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.23.1)

org.seleniumhq.selenium:selenium-server MAVEN version 2.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - net.thucydides.easyb:thucydides-easyb-plugin =0.8.25, =0.8.25, =0.8.25,...

com.googlecode.xmlblackbox:xmlblackbox (>=2.8.28, <=3.0.4), net.thucydides.maven.plugins:maven-thucydides-plugin (>=0.9.0-beta-4, <=0.9.0-rc3) +7 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.24.1)

org.seleniumhq.selenium:selenium-server MAVEN version 2.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.googlecode.xmlblackbox:xmlblackbox =2.8.28, =0.9.0-beta-4, =0.9.0-beta-4,...

com.daveayan:gherkinsalad (>=1.6, <=2.0), com.daveayan:gherkinsalad.cucumber (>=1.6, <=2.0) +12 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.28.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.daveayan:gherkinsalad =1.6, =1.6, =1.6, =1.6, =1.6, =1.0.1, =3.0.11, =3.1.2 ...

com.github.markusbernhardt:robotframework-selenium2library-java (>=1.1.0.3, <=1.1.0.5), com.github.markusbernhardt:selenium2library (>=1.1.0.0, <=1.1.0.2) +7 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.30.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.github.markusbernhardt:robotframework-selenium2library-java =1.1.0.3,...

jp.vmi:selenese-runner-java (1.1.5), net.thucydides.easyb:thucydides-easyb-plugin (0.9.204) +4 more potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.34.0)

org.seleniumhq.selenium:selenium-server MAVEN version 2.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - jp.vmi:selenese-runner-java 1.1.5 - net.thucydides.easyb:thucydides-easyb-plugin...