Lucene search
Veracode Vulnerability DatabaseVERACODE:7365HistoryAug 28, 2018 - 6:11 a.m.
Cross-Site Request Forgery (CSRF)
2018-08-2806:11:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
48.2%
github.com/openshift/console is vulnerable to cross-site request forgery (CSRF) on proxied requests. The server did not perform verification for anti-CSRF tokens and source Origin header of requests. This would allow an attacker to submit requests on behalf of authenticated users via a specially crafted HTML page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/openshift/console | eq | HEAD | |
| github.com/openshift/console | le | 6.0.6 | |
| github.com/openshift/console | le | 3.0.8 |
References
www.securityfocus.com/bid/105190
bugzilla.redhat.com/show_bug.cgi?id=1622372
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10937
github.com/openshift/console/commit/09e85eb699b5cd668d8891e544fc78a458e01a56
github.com/openshift/console/commit/d56666852da6e7309a2e63a49f49a72ff66d309c
github.com/openshift/console/pull/461
Related
nvd
nvd
CVE-2018-10937
2018-09-11 16:29:00
osv
osv
CVE-2018-10937
2018-09-11 16:29:00
prion
prion
Cross site scripting
2018-09-11 16:29:00
cve
cve
CVE-2018-10937
2018-09-11 16:29:00
redhatcve
redhatcve
CVE-2018-10937
2020-04-09 10:18:13
cvelist
cvelist
CVE-2018-10937
2018-09-11 16:00:00