Lucene search
Veracode Vulnerability DatabaseVERACODE:28003HistoryNov 30, 2020 - 4:35 a.m.
Cross-Site Request Forgery (CSRF)
2020-11-3004:35:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.002 Low
EPSS
Percentile
55.8%
akka-http-session is vulnerable to cross-site request forgery (CSRF). The CSRF protection can be bypassed using an empty X-XSRF-TOKEN header and a XSRF-TOKEN cookie with empty value.
| CPE | Name | Operator | Version |
|---|---|---|---|
| akka-http-session | le | 0.1.4-2.0-M1 | |
| core | le | 0.5.10 | |
| core | le | 0.5.10 | |
| core | le | 0.5.10 |
Related
cvelist
cvelist
CVE-2020-7780 Cross-site Request Forgery (CSRF)
2020-11-27 00:00:00
prion
prion
Code injection
2020-11-27 17:15:00
cve
cve
CVE-2020-7780
2020-11-27 17:15:12
nvd
nvd
CVE-2020-7780
2020-11-27 17:15:12
osv
osv
CVE-2020-7780
2020-11-27 17:15:12
Cross-Site Request Forgery
2022-02-09 23:06:40
github
github
Cross-Site Request Forgery
2022-02-09 23:06:40