Lucene search
Veracode Vulnerability DatabaseVERACODE:35803HistoryJun 02, 2022 - 9:17 a.m.
Cross Site Request Forgery (CSRF)
2022-06-0209:17:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.001 Low
EPSS
Percentile
30.5%
solidus is vulnerable to cross-site request forgery. The vulnerability exists in routes.rb due to a lack of input validation, allowing an attacker to inject and execute arbitrary javascript to make changes to the system.
References
github.com/solidusio/solidus/commit/0334477b875af6aad92e6b56a43708e0290acc10
github.com/solidusio/solidus/commit/284afa8dda064b5f55312b7be4ad7ae0d39e17d3
github.com/solidusio/solidus/commit/5cd33b13c86f1a7089037d4ca2df9c3f10942ba6
github.com/solidusio/solidus/commit/de796a2e0be7f154cae48b46e267501559d9716c
github.com/solidusio/solidus/security/advisories/GHSA-8639-qx56-r428
Related
osv
osv
CVE-2022-31000
2022-06-01 18:15:07
prion
prion
Cross site request forgery (csrf)
2022-06-01 18:15:00
cve
cve
CVE-2022-31000
2022-06-01 18:15:07
nvd
nvd
CVE-2022-31000
2022-06-01 18:15:07
github
github
cvelist
cvelist
cnvd
cnvd
solidus_backend cross-site request forgery vulnerability
2022-06-02 00:00:00