Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

csrf vulnerabilities and exploits

(subscribe to this query)

6.8
CVSSv2
CVE-2015-0807
The navigator.sendBeacon implementation in Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 processes HTTP 30x status codes for redirects after a preflight request has occurred, which allows remote attackers to bypass intended CORS...
Mozilla Firefox Esr 31.5.3Mozilla Firefox Esr 31.0Mozilla Firefox Esr 31.4Mozilla Firefox Esr 31.5Mozilla Firefox Esr 31.1.1Mozilla Firefox Esr 31.2Mozilla ThunderbirdMozilla Firefox Esr 31.1Mozilla Firefox Esr 31.1.0Mozilla Firefox Esr 31.5.1Mozilla Firefox Esr 31.5.2Mozilla FirefoxMozilla Firefox Esr 31.3Mozilla Firefox Esr 31.3.0
6.8
CVSSv2
CVE-2021-36876
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administration pages....
Stylemixthemes Ulisting
6.8
CVSSv2
CVE-2019-10642
Contao 4.7 allows CSRF....
Contao Contao Cms 4.7.0
2.6
CVSSv2
CVE-2022-20612
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set....
Jenkins JenkinsOracle Communications Cloud Native Core Automated Test Suite 1.9.0
6.8
CVSSv2
CVE-2017-5891
ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF....
Asus Rt-ac1750 Firmware 3.0.0.4.380.7266
6.8
CVSSv2
CVE-2019-7346
A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful....
Zoneminder Zoneminder
NA
CVE-2023-32980
A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an attacker-specified job....
Jenkins Email Extension
4.3
CVSSv2
CVE-2022-28138
A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential....
Jenkins Rocketchat Notifier
6.8
CVSSv2
CVE-2020-5776
Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI....
Magmi Project Magmi
6.8
CVSSv2
CVE-2017-16570
KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to reject requests that lack an x-csrf-token header....
Keystonejs Keystone
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
XSSCVE-2023-48314CVE-2023-6376CVE-2023-46384arbitrary codeCVE-2023-42917CVE-2023-48842CVE-2023-42916firewall
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook