Lucene search
+L

1 matches found

OSV
OSV
added 2019/07/30 8:47 p.m.51 views

GHSA-J3JP-GVR5-7HWQ python-engineio vulnerable to Cross-Site Request Forgery (CSRF)

WebSocket cross-origin vulnerability Impact This is a Cross-Site Request Forgery CSRF vulnerability. It affects Socket.IO and Engine.IO web servers that authenticate clients using cookies. Patches python-engineio version 3.9.0 patches this vulnerability by adding server-side Origin header checks...

8.8CVSS8.8AI score0.00853EPSS
SaveExploits0References6
Rows per page
Query Builder