Cross-Site Request Forgery (CSRF)

2020-10-0103:46:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

21.8%

JSON

cfme-gemset is vulnerable to cross-site request forgery (CSRF). Lack of authenticity verification of requests in the API notifications allows an attacker to submit requests on behalf of an authenticated user.

CPENameOperatorVersion
cfmeeq5.11.0.28__1.el8cf
cfmeeq5.11.6.0__1.el8cf
cfmeeq5.11.7.3__1.el8cf
cfmeeq5.11.1.2__1.el8cf
cfmeeq5.11.5.2__1.el8cf
cfmeeq5.11.2.2__1.el8cf
cfmeeq5.11.4.2__1.el8cf
cfmeeq5.11.3.1__1.el8cf
cfme-applianceeq5.11.0.28__1.el8cf
cfme-applianceeq5.11.6.0__1.el8cf

Name	Operator	Version
cfme	eq	5.11.0.28__1.el8cf
cfme	eq	5.11.6.0__1.el8cf
cfme	eq	5.11.7.3__1.el8cf
cfme	eq	5.11.1.2__1.el8cf
cfme	eq	5.11.5.2__1.el8cf
cfme	eq	5.11.2.2__1.el8cf
cfme	eq	5.11.4.2__1.el8cf
cfme	eq	5.11.3.1__1.el8cf
cfme-appliance	eq	5.11.0.28__1.el8cf
cfme-appliance	eq	5.11.6.0__1.el8cf