Csrfguard
1 CVEs
product
Monthly
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
CSRF
Csrfguard
NVD
GitHub
CVSS 3.1
8.8
EPSS
0.5%
CVE-2021-28490
Maven
EPSS 1%
CVSS 8.8
HIGH
PATCH
This Week
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
CSRF
Csrfguard
NVD
GitHub