Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32967
HistoryNov 15, 2021 - 3:45 a.m.

Cross-site Request Forgery (CSRF)

2021-11-1503:45:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
cross-site request forgery
area17/twill
vulnerability
unsecure
get request
attacker
script.

EPSS

0.001

Percentile

31.0%

area17/twill is vulnerable to cross-site request forgery. The vulnerability exists due to the use of unsecure GET request which allows an attacker to use the script src="" to log out any user who went to the attacker website.

EPSS

0.001

Percentile

31.0%