Lucene search
Veracode Vulnerability DatabaseVERACODE:36379HistoryJul 18, 2022 - 6:30 a.m.
Cross-site Request Forgery (CSRF)
2022-07-1806:30:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
44.4%
liferay is vulnerable to cross-site request forgery. The vulnerability exists due to the lack of validation in the csrf token in the process function of EditPageHandler.java, allowing an attacker to guess the csrf token value.
| CPE | Name | Operator | Version |
|---|---|---|---|
| togglz - admin console | le | 2.9.3 | |
| togglz - admin console | le | 2.9.3 |
Related
nvd
nvd
CVE-2020-28191
2022-12-26 22:15:10
cvelist
cvelist
CVE-2020-28191
2022-12-26 00:00:00
github
github
Togglz console missing cross-site request forgery (CSRF) protection
2022-07-15 20:55:21
osv
osv
CVE-2020-28191
2022-12-26 22:15:10
Togglz console missing cross-site request forgery (CSRF) protection
2022-07-15 20:55:21
cve
cve
CVE-2020-28191
2022-12-26 22:15:10
prion
prion
Cross site request forgery (csrf)
2022-12-26 22:15:00