Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32970
HistoryNov 15, 2021 - 4:16 a.m.

Cross-site Request Forgery (CSRF)

2021-11-1504:16:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
cross-site request forgery
showdoc
vulnerability

EPSS

0.001

Percentile

31.0%

showdoc/showdoc is vulnerable to cross-site request forgery. The server is unable to verify the authenticity of web requests due to a lack of anti-CSRF protection mechanism in the REST API, allowing an attacker to add any member for any item if users visit the attacker site.

EPSS

0.001

Percentile

31.0%