Lucene search
Veracode Vulnerability DatabaseVERACODE:8099HistoryDec 31, 2018 - 9:01 a.m.
Cross Site Request Forgery (CSRF)
2018-12-3109:01:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.002
Percentile
53.3%
hsweb-system-oauth2-client is vulnerable to cross site request forgery (CSRF). The state value which serves as an anti-CSRF token is not validated and verified for authenticated requests within the session, allowing a remote attacker to execute unwanted actions in the context of the user when the victim is tricked into visiting a malicious web page.
Related
cve
cve
CVE-2018-20595
2018-12-30 18:29:00
osv
osv
CVE-2018-20595
2018-12-30 18:29:00
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
2019-01-04 17:43:22
github
github
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
2019-01-04 17:43:22
cvelist
cvelist
CVE-2018-20595
2018-12-30 18:00:00
nvd
nvd
CVE-2018-20595
2018-12-30 18:29:00
prion
prion
Cross site request forgery (csrf)
2018-12-30 18:29:00