Lucene search
Veracode Vulnerability DatabaseVERACODE:37512HistoryOct 11, 2022 - 2:13 p.m.
Cross-site Request Forgery (CSRF)
2022-10-1114:13:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
cross-site request forgery
csrf vulnerability
cookie encryption
token access
EPSS
0.001
Percentile
48.7%
tiny-csrf is vulnerable to cross-site request forgery. The vulnerability exists due tocsurf because the cookies are not encrypted which allows an attacker to gain access to the tokens and bypass CSRF checks.
Related
osv
osv
CVE-2022-39287
2022-10-07 20:15:15
tiny-csrf has openly visible CSRF tokens
2022-10-07 21:23:18
cvelist
cvelist
CVE-2022-39287 Plaintext transmission of CSRF tokens in tiny-csrf
2022-10-07 00:00:00
nvd
nvd
CVE-2022-39287
2022-10-07 20:15:15
prion
prion
Cross site request forgery (csrf)
2022-10-07 20:15:00
cve
cve
CVE-2022-39287
2022-10-07 20:15:15
github
github
tiny-csrf has openly visible CSRF tokens
2022-10-07 21:23:18