Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/09/25 6:21 p.m.30 views

Cross-Site Request Forgery (CSRF) in strawberry-graphql

Impact Multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable to CSRF attacks if users did not explicitly enable CSRF preventing security...

8CVSS7.2AI score0.0023EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder