Lucene search
Veracode Vulnerability DatabaseVERACODE:38677HistoryDec 28, 2022 - 8:37 a.m.
Cross-Site Request Forgery (CSRF)
2022-12-2808:37:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
nsupdate
csrf
vulnerability
base.py
http headers
attacker
sensitive information
EPSS
0.001
Percentile
34.2%
nsupdate is vulnerable to cross-site request forgery. The vulnerability exists in CSRF_COOKIE_HTTPONLY cookie in base.py due to lack of proper security HTTP headers which allows an attacker to gain access to sensitive information in the system.
Related
osv
osv
CVE-2019-25091
2022-12-27 23:15:10
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
2022-12-28 00:30:22
nvd
nvd
CVE-2019-25091
2022-12-27 23:15:10
cvelist
cvelist
CVE-2019-25091 nsupdate.info CSRF Cookie base.py cookie httponly flag
2022-12-27 22:42:34
cve
cve
CVE-2019-25091
2022-12-27 23:15:10
prion
prion
Cross site request forgery (csrf)
2022-12-27 23:15:00
github
github
nsupdate.info has Sensitive Cookie Without 'HttpOnly' Flag
2022-12-28 00:30:22