SeleniumSelenium Grid
1 matches found
CVE-2022-28108
CVE-2022-28108: Selenium Server (Grid) CSRF in versions before 4.0.0-alpha-7 arises because the server accepts non-JSON content types (e.g., text/plain, application/x-www-form-urlencoded, multipart/form-data) for requests. The vulnerability can be triggered via crafted requests (e.g., to /wd/hub/...
9.3CVSS8.7AI score0.11727EPSS
SaveWeb