Cross-Site Request Forgery (CSRF)

2023-01-1106:22:52

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site request forgery

github

csrf tokens

insecure generation

vulnerability

EPSS

0.001

Percentile

47.5%

JSON

github.com/dinever/golf is vulnerable to cross-site request forgery (CSRF). The vulnerability is due to a lack of cryptographically secure random numbers used in CSRF tokens generation resulting in the values being predicted relatively easily, resulting in CSRF bypass.