Lucene search
Veracode Vulnerability DatabaseVERACODE:48526HistoryAug 23, 2024 - 7:26 a.m.
Cross-Site Request Forgery (CSRF)
2024-08-2307:26:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
cross-site request forgery
csrf
hono
vulnerability
middleware
mime type
bypassing protection
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
6.7
Confidence
Low
Hono is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability is due to the CSRF middleware’s case sensitivity in MIME type matching, which allows bypassing protection with upper-case MIME types.
Related
github
github
Hono CSRF middleware can be bypassed using crafted Content-Type header
2024-08-22 16:41:08
nvd
nvd
CVE-2024-43787
2024-08-22 15:15:16
cvelist
cvelist
osv
osv
CVE-2024-43787
2024-08-22 15:15:16
Hono CSRF middleware can be bypassed using crafted Content-Type header
2024-08-22 16:41:08
cve
cve
CVE-2024-43787
2024-08-22 15:15:16
vulnrichment
vulnrichment
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
6.7
Confidence
Low
Related for VERACODE:48526