Lucene search
+L
SeleniumSelenium Grid

1 matches found

CVE
CVE
added 2022/04/19 2:55 a.m.143 views

CVE-2022-28108

CVE-2022-28108: Selenium Server (Grid) CSRF in versions before 4.0.0-alpha-7 arises because the server accepts non-JSON content types (e.g., text/plain, application/x-www-form-urlencoded, multipart/form-data) for requests. The vulnerability can be triggered via crafted requests (e.g., to /wd/hub/...

9.3CVSS8.7AI score0.11727EPSS
SaveWeb