Cross-Site Request Forgery (CSRF)

2020-04-1703:30:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

29.9%

JSON

@fraction/oasis is vulnerable to cross-site request forgery (CSRF). An attacker is able to submit requests to the vulnerable application on behalf of a user who visits a malicious website.

CPENameOperatorVersion
@fraction/oasisle2.14.0
@fraction/oasisle2.14.0

CPE	Name	Operator	Version
	@fraction/oasis	le	2.14.0
	@fraction/oasis	le	2.14.0

References

github.com/advisories/GHSA-j438-45hc-vjhm

github.com/fraction/oasis/security/advisories/GHSA-j438-45hc-vjhm

0.001 Low

EPSS

Percentile

29.9%

JSON

Related for VERACODE:25046