Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-45857
HistoryNov 08, 2023 - 12:00 a.m.

CVE-2023-45857

2023-11-0800:00:00
mitre
github.com
4
axios
xsrf-token
cookies
http header
security issue

AI Score

6.8

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial