2 matches found
Komari: Management Interface CSRF
Vulnerability Overview The sessiontoken cookie is set without the SameSite or Secure attributes login.go:68. All /api/admin/ management endpoints rely solely on this cookie for authentication, with no CSRF token or Origin validation. The server-side vulnerability is confirmed to exist; however,...
6.2AI score
SaveExploits0References3Affected Software1
GHSA-HXJG-93WC-H8P8 Komari: Management Interface CSRF
Vulnerability Overview The sessiontoken cookie is set without the SameSite or Secure attributes login.go:68. All /api/admin/ management endpoints rely solely on this cookie for authentication, with no CSRF token or Origin validation. The server-side vulnerability is confirmed to exist; however,...
8.8CVSS6.2AI score
SaveExploits0References3
20