Cross site request forgery (csrf)

2021-06-0212:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

JSON

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.

CPENameOperatorVersion
infinispan-server-resteq10.0.0
data_grideq8.0

CPE	Name	Operator	Version
	infinispan-server-rest	eq	10.0.0
	data_grid	eq	8.0

References

bugzilla.redhat.com/show_bug.cgi?id=1846293

security.netapp.com/advisory/ntap-20210827-0003/