csrf - Robuta Search

https://owasp.org/www-community/attacks/csrf Cross Site Request Forgery (CSRF) | OWASP Foundation Cross Site Request Forgery (CSRF) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software. cross site request forgery csrf owasp foundation https://advisories.gitlab.com/maven/org.xwiki.platform/xwiki-platform-scheduler-ui/CVE-2024-31985/ XWiki Platform CSRF in the job scheduler | GitLab Advisory Database (GLAD) CVE-2024-31985 XWiki Platform CSRF in the job scheduler: It is possible to schedule/trigger/unschedule existing jobs by having an admin visit the Job Scheduler... in the job xwiki platform csrf https://advisories.gitlab.com/golang/github.com/mattermost/mattermost/server/v8/CVE-2026-28741/ Mattermost doesn't validate CSRF tokens on an authentication endpoint | GitLab Advisory Database... https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/service-fabric/CVE-2025-24402/ CSRF vulnerability in Jenkins Azure Service Fabric Plugin | GitLab Advisory Database (GLAD) CVE-2025-24402 CSRF vulnerability in Jenkins Azure Service Fabric Plugin : A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric... azure service fabric https://advisories.gitlab.com/composer/moodle/moodle/CVE-2025-3635/ Moodle has a CSRF risk in user tours manager that allows tour duplication | GitLab Advisory... CVE-2025-3635 Moodle has a CSRF risk in user tours manager that allows tour duplication: A security vulnerability was discovered in Moodle that allows anyone... https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/coverity/CVE-2022-36920/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2022-36920 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Coverity Plugin 1.11.4 and earlier allows... cross site request forgery csrf gitlab advisory database https://www.okta.com/en-nl/identity-101/csrf-attack/ CSRF Attack: Cross-Site Request Forgery Definition & Defense | Okta cross site request forgery csrf attack definition defense okta https://advisories.gitlab.com/composer/moodle/moodle/CVE-2024-34008/ Moodle CSRF risk in analytics management of models | GitLab Advisory Database (GLAD) CVE-2024-34008 Moodle CSRF risk in analytics management of models: Actions in the admin management of analytics models did not include the necessary token to... analytics management https://advisories.gitlab.com/golang/github.com/adguardteam/adguardhome/CVE-2022-32175/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2022-32175 Cross-Site Request Forgery (CSRF): In AdGuardHome, versions v0.95 through v0.108.0-b.13 is vulnerable to Cross-Site Request Forgery (CSRF), in... cross site request forgery csrf gitlab advisory database https://kathan19.gitbook.io/howtohunt/csrf/csrf-1 CSRF MindMap | HowToHunt csrf mindmap https://advisories.gitlab.com/maven/com.jfinal/jfinal/CVE-2023-49447/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-49447 Cross-Site Request Forgery (CSRF): JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via... cross site request forgery csrf gitlab advisory database https://vercel.com/blog/understanding-csrf-attacks Understanding CSRF attacks - Vercel Understand the mechanics and risks of Cross-Site Request Forgery (CSRF) attacks, and discover crucial development practices, like anti-CSRF tokens and... understanding csrf attacks vercel https://advisories.gitlab.com/npm/whistle/CVE-2024-55500/ Avenwu Whistle Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2024-55500 Avenwu Whistle Cross-Site Request Forgery (CSRF): Cross-Site Request Forgery (CSRF) in Avenwu Whistle v.2.9.90 and before allows attackers to... cross site request forgery whistle https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/keycloak/CVE-2023-24457/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-24457 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier... cross site request forgery csrf gitlab advisory database https://symfony.com/doc/current/security/csrf.html How to Implement CSRF Protection (Symfony Docs) CSRF, or Cross-site request forgery, is a type of attack where a malicious actor tricks a user into performing actions on a web application without their... how to implement csrf protection symfony docs https://advisories.gitlab.com/composer/magento/community-edition/CVE-2019-7873/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2019-7873 Cross-Site Request Forgery (CSRF): A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9,... cross site request forgery csrf gitlab advisory database https://lists.whatwg.org/pipermail/whatwg-whatwg.org/2009-July/063451.html [whatwg] Clickjacking and CSRF whatwg clickjacking csrf https://bughunters.google.com/reports/vrp/hwALTTZzh/report Missing CSRF Token in Delete Account Request on https://www.androidenterprise.dev/ | Google Bug... Found a security vulnerability? Discover our forms for reporting security issues to Google: for the standard VRP, Google Play, and Play Data Abuse. https://advisories.gitlab.com/golang/github.com/1panel-dev/1panel/CVE-2025-34410/ 1Panel contains a cross-site request forgery (CSRF) vulnerability in the Change Username... CVE-2025-34410 1Panel contains a cross-site request forgery (CSRF) vulnerability in the Change Username functionality: 1Panel versions 1.10.33 - 2.0.15 contain... cross site request forgery https://advisories.gitlab.com/composer/admidio/admidio/GHSA-rmpj-3x5m-9m5f/ Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion | GitLab... GHSA-rmpj-3x5m-9m5f Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion: The documents and files module in Admidio does not... csrf protection https://gist.github.com/ananth-iyer/59ecfabcbca73d6c2e3eeb986ed2f3c4?permalink_comment_id=3074601 Magento 2.3.0: Implement below code to skip the CSRF check on your custom route called outside... Magento 2.3.0: Implement below code to skip the CSRF check on your custom route called outside Magento environment. This implementation does not break core... https://advisories.gitlab.com/composer/intelliants/subrion/CVE-2019-7357/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2019-7357 Cross-Site Request Forgery (CSRF): Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. The attacker can remotely activate/deactivate the... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/pypi/openvpn-monitor/CVE-2021-31604/ furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client | GitLab Advisory Database... CVE-2021-31604 furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client: furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an... https://advisories.gitlab.com/pkg/npm/csrf-csrf/GMS-2022-5273/ https://advisories.gitlab.com/npm/csrf-csrf/GMS-2022-5273/ https advisories gitlab npm csrf https://symfony.com/doc/2.x/controller/csrf_token_validation.html How to Manually Validate a CSRF Token in a Controller (Symfony 2.x Docs) Sometimes, you want to use CSRF protection in an action where you do not want to use the Symfony Form component. If, for example, you are implementing a DELETE... https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/github-oauth/CVE-2019-10315/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2019-10315 Cross-Site Request Forgery (CSRF): Jenkins GitHub Authentication Plugin 0.31 and earlier does not use the state parameter of OAuth to prevent... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/google-compute-engine/CVE-2023-49673/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-49673 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and... cross site request forgery csrf gitlab advisory database https://homakov.blogspot.com/2013/05/csrf-tool.html Egor Homakov: CSRF Tool I facepalm when I hear about CSRF in popular websites. ( I was searching for them in the past but then realized that's a boring waste of t... egor csrf tool https://advisories.gitlab.com/maven/com.xebialabs.deployit.ci/deployit-plugin/CVE-2021-21665/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2021-21665 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Deploy Plugin 10.0.1 and earlier... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/ec2-deployment-dashboard/CVE-2023-50775/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-50775 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier... cross site request forgery csrf gitlab advisory database https://bugzilla.mozilla.org/show_bug.cgi?id=1059743 1059743 - CSRF token Validation Problem on support.mozilla.org RESOLVED (nobody) in support.mozilla.org - General. Last updated 2024-05-30. token validation csrf problem support mozilla https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/swarm/CVE-2020-2192/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2020-2192 Cross-Site Request Forgery (CSRF): A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/com.jfinal/jfinal/CVE-2023-49383/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-49383 Cross-Site Request Forgery (CSRF): JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/golang/github.com/patrickhener/goshs/v2/CVE-2026-40883/ goshs has CSRF in state-changing GET routes enables authenticated file deletion and directory... CVE-2026-40883 goshs has CSRF in state-changing GET routes enables authenticated file deletion and directory creation: goshs contains a cross-site request... https://keyshot.atlassian.net/wiki/spaces/DD/pages/1010240960/DC+5.3.0+5.3+Configuring+CSRF+protection DC 5.3.0 5.3 Configuring CSRF protection - Documentation - KeyShot Confluence csrf protection dc configuring documentation keyshot https://eu.wordpress.org/plugins/tags/csrf/ csrf gisa sailkatutako pluginak | WordPress.org Euskara csrf gisa pluginak wordpress euskara https://advisories.gitlab.com/golang/github.com/destinygg/chat/CVE-2020-36625/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2020-36625 Cross-Site Request Forgery (CSRF): ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in destiny.gg chat. It has been rated as... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/golang/github.com/patrickhener/goshs/v2/GHSA-rhf7-wvw3-vjvm/ goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS | GitLab... GHSA-rhf7-wvw3-vjvm goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS: The PUT upload handler (httpserver/updown.go) lacks... https://rsci-alternate.app.link/d496ONHsdZ?__branch_flow_type=viewapp&__branch_flow_id=1574465778272450227&__branch_mobile_deepview_type=1 Attacking Sites Using CSRF From CSRF to user information leak, XSS and full account takeover. attacking sites using csrf https://advisories.gitlab.com/composer/symfony/symfony/CVE-2022-24895/ Symfony vulnerable to Session Fixation of CSRF tokens | GitLab Advisory Database (GLAD) CVE-2022-24895 Symfony vulnerable to Session Fixation of CSRF tokens: Description When authenticating users Symfony by default regenerates the session ID upon... session fixation https://jorgectf.gitbook.io/awae-oswe-preparation-resources/general/pocs/csrf CSRF | AWAE - OSWE Preparation / Resources Cross-Site Request Forgery (CSRF) csrf awae oswe preparation resources https://advisories.gitlab.com/composer/snipe/snipe-it/CVE-2023-5511/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-5511 Cross-Site Request Forgery (CSRF): Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3. cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/org.jenkinsci.plugins/octoperf/CVE-2023-28674/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-28674 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/matlab/CVE-2023-49656/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-49656 Cross-Site Request Forgery (CSRF): Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity... cross site request forgery csrf gitlab advisory database https://experienceleague.adobe.com/en/docs/experience-manager-dispatcher/using/configuring/configuring-dispatcher-to-prevent-csrf Configuring Adobe Experience Manager Dispatcher to Prevent CSRF Attacks | Adobe Experience Manager Learn how to configure the Adobe Experience Manager Dispatcher to prevent Cross-Site Request Forgery attacks. adobe experience manager configuring dispatcher prevent csrf https://www.jetbrains.com/help/teamcity/2022.10/csrf-protection.html CSRF Protection | TeamCity On-Premises Documentation csrf protection teamcity premises documentation https://advisories.gitlab.com/maven/com.liferay.portal/release.portal.bom/CVE-2024-26272/ Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page... CVE-2024-26272 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor: Cross-site request forgery (CSRF)... https://mail.python.org/pipermail/mailman-users/2018-January/082879.html [Mailman-Users] Mailman CSRF Vulnerability mailman users csrf vulnerability https://lug.wordpress.org/plugins/tags/csrf/ Plugins categorized as csrf | WordPress.org Oluganda plugins categorized csrf wordpress oluganda https://advisories.gitlab.com/maven/com.ctrip.framework.apollo/apollo/CVE-2023-25569/ apollo-portal has potential CSRF issue | GitLab Advisory Database (GLAD) CVE-2023-25569 apollo-portal has potential CSRF issue: Apollo is a configuration management system. Prior to version 2.1.0, a low-privileged user can create a... apollo portal potential csrf issue https://advisories.gitlab.com/maven/org.jenkins-ci.main/jenkins-core/CVE-2025-67639/ Jenkins has a CSRF vulnerability on the login form | GitLab Advisory Database (GLAD) CVE-2025-67639 Jenkins has a CSRF vulnerability on the login form: A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2... https://advisories.gitlab.com/maven/org.pac4j/pac4j-core/CVE-2026-40458/ PAC4J has a Cross-Site Request Forgery (CSRF) Vulnerability | GitLab Advisory Database (GLAD) CVE-2026-40458 PAC4J has a Cross-Site Request Forgery (CSRF) Vulnerability: PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can... cross site request forgery https://advisories.gitlab.com/composer/unopim/unopim/CVE-2025-55744/ UnoPim vulnerable to CSRF on Product edit feature and creation of other types | GitLab Advisory... CVE-2025-55744 UnoPim vulnerable to CSRF on Product edit feature and creation of other types: Some of the endpoints of the application is vulnerable to Cross... https://code.djangoproject.com/ticket/28488?cnum_hist=3&cversion=2 #28488 (Django 1.11+ raises CSRF verification failed if settings.DEBUG is False and an intermediate... https://infosec4tc.teachable.com/courses/phmc1/lectures/6582943 CSRF on Low Security | InfoSec4TC A Complete Series on Ethical Hacking - PHMC SECURITIES low security csrf https://target.csrf.patrickod.com/ gorilla/csrf CSRF demo target origin gorilla csrf demo target origin https://advisories.gitlab.com/maven/com.liferay.portal/release.dxp.bom/CVE-2024-26271/ Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account... CVE-2024-26271 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget: Cross-site request forgery (CSRF)... https://nuxt-security.vercel.app/middleware/csrf Cross Site Request Forgery (CSRF) - Nuxt Security Protect user actions from unwanted state change. cross site request forgery csrf nuxt security https://advisories.gitlab.com/npm/next/CVE-2026-27978/ Next.js: null origin can bypass Server Actions CSRF checks | GitLab Advisory Database (GLAD) CVE-2026-27978 Next.js: null origin can bypass Server Actions CSRF checks: origin: null was treated as a "missing" origin during Server Action CSRF validation.... https://gist.github.com/ananth-iyer/59ecfabcbca73d6c2e3eeb986ed2f3c4?permalink_comment_id=3089172 Magento 2.3.0: Implement below code to skip the CSRF check on your custom route called outside... Magento 2.3.0: Implement below code to skip the CSRF check on your custom route called outside Magento environment. This implementation does not break core... https://advisories.gitlab.com/composer/drupal/oauth2_client/CVE-2025-31684/ Drupal OAuth2 Client Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2025-31684 Drupal OAuth2 Client Cross-Site Request Forgery (CSRF): Cross-Site Request Forgery (CSRF) vulnerability in Drupal OAuth2 Client allows Cross... cross site request forgery https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/publish-to-bitbucket/CVE-2025-64149/ Jenkins Publish to Bitbucket Plugin vulnerable to CSRF and missing permissions check | GitLab... CVE-2025-64149 Jenkins Publish to Bitbucket Plugin vulnerable to CSRF and missing permissions check: Jenkins Publish to Bitbucket Plugin 0.4 and earlier does... https://advisories.gitlab.com/pypi/sentry-sdk/GMS-2023-833/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) GMS-2023-833 Cross-Site Request Forgery (CSRF): Cross-Site Request Forgery (CSRF) in sentry-sdk. cross site request forgery csrf gitlab advisory database https://www.drupal.org/node/2459349 Decisions - Moderately Critical - Cross Site Request Forgery (CSRF) - Unsupported -... Jun 12, 2015 - Advisory ID: DRUPAL-SA-CONTRIB-2015-086 Project: Decisions (third-party module) Version: 6.x Date: 2015-March-25 Security risk: 13/25 ( Moderately Critical)... cross site request forgery decisions moderately critical csrf https://advisories.gitlab.com/maven/net.praqma/matrix-reloaded/CVE-2022-34789/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2022-34789 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Matrix Reloaded Plugin 1.1.3 and earlier allows... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/pypi/apache-airflow-providers-keycloak/CVE-2026-40948/ apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session... CVE-2026-40948 apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session Fixation: The Keycloak authentication manager... https://infosec4tc.teachable.com/courses/phmc1/lectures/6582937 CSRF on Medium Security | InfoSec4TC A Complete Series on Ethical Hacking - PHMC SECURITIES on medium csrf security https://advisories.gitlab.com/maven/com.sonyericsson.jenkins.plugins.bfa/build-failure-analyzer/CVE-2023-43500/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-43500 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/npm/ghost/GHSA-9m84-wc28-w895/ Ghost has incomplete CSRF protections around OTC use | GitLab Advisory Database (GLAD) GHSA-9m84-wc28-w895 Ghost has incomplete CSRF protections around OTC use: Incomplete CSRF protections around /session/verify made it possible to use OTCs in... https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/hp-application-automation-tools-plugin/CVE-2021-22512/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2021-22512 Cross-Site Request Forgery (CSRF): Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/composer/magento/community-edition/CVE-2021-21027/ Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API | GitLab Advisory... CVE-2021-21027 Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and... cross site request forgery https://gist.github.com/ananth-iyer/59ecfabcbca73d6c2e3eeb986ed2f3c4?permalink_comment_id=3075317 Magento 2.3.0: Implement below code to skip the CSRF check on your custom route called outside... Magento 2.3.0: Implement below code to skip the CSRF check on your custom route called outside Magento environment. This implementation does not break core... https://advisories.gitlab.com/pypi/rdiffweb/CVE-2022-3221/ rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access | GitLab Advisory... CVE-2022-3221 rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access: rdiffweb prior to 2.4.3 is vulnerable to Cross-Site Request... https://advisories.gitlab.com/maven/com.xebialabs.deployit.ci/deployit-plugin/CVE-2019-10304/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2019-10304 Cross-Site Request Forgery (CSRF): A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the... cross site request forgery csrf gitlab advisory database https://www.drupal.org/node/2407357 SA-CONTRIB-2015-020 - Contact Form Fields - Cross Site Request Forgery (CSRF) | Drupal.org Jun 12, 2015 - Advisory ID: DRUPAL-SA-CONTRIB-2015-020 Project: Contact form fields (third-party module) Version: 6.x Date: 2015-January-14 Security risk: 13/25 ( Moderately... cross site request forgery https://code.djangoproject.com/ticket/28488?cnum_hist=3&cversion=0 #28488 (Django 1.11+ raises CSRF verification failed if settings.DEBUG is False and an intermediate... https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/libvirt-slave/CVE-2021-21627/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2021-21627 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows... cross site request forgery csrf gitlab advisory database https://lists.whatwg.org/pipermail/whatwg-whatwg.org/2009-July/063581.html [whatwg] Clickjacking and CSRF whatwg clickjacking csrf https://securitylab.github.com/advisories/GHSL-2023-061_BlueOcean/ GHSL-2023-061: Cross-Site Request Forgery (CSRF) and Server-Side Request Forgery (SSRF) in... Aug 25, 2023 - A CSRF/SSRF vulnerability in jenkinsci/blueocean-plugin allows the leak of sensitive credentials (including GitHub credentials) to an attacker-controlled... cross site request forgery https://ftp.lysator.liu.se/ubuntu/ubuntu/ubuntu/pool/universe/g/golang-github-go-macaron-csrf/?C=M&O=A Index of /ubuntu/ubuntu/ubuntu/pool/universe/g/golang-github-go-macaron-csrf/ index of ubuntu pool universe https://advisories.gitlab.com/maven/org.jenkins-ci.plugins.m2release/m2release/CVE-2019-16550/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2019-16550 Cross-Site Request Forgery (CSRF): A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/openshift-deployer/CVE-2022-36908/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2022-36908 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier... cross site request forgery csrf gitlab advisory database https://bughunters.google.com/learn/invalid-reports/web-platform/csrf-clickjacking/xss-or-csrf-that-requires-header-injection XSS or CSRF that requires header injection | Google Bug Hunters The security model of modern browsers and browser plugins is designed to prevent malicious websites from making unsolicited cross-origin requests with... xss csrf requires header injection https://community.atlassian.com/forums/Crowd-questions/Vulnerability-in-CSRF-test/qaq-p/1476992 Vulnerability in CSRF test Dec 4, 2020 - Hi, It has been identified that the forms do not have mechanisms to prevent CSRF attacks, because of this, a malicious user can force the browser to vulnerability csrf test https://advisories.gitlab.com/maven/org.apache.tomcat/tomcat/CVE-2012-4431/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2012-4431 Cross-Site Request Forgery (CSRF): org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/configurationslicing/CVE-2021-21617/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2021-21617 Cross-Site Request Forgery (CSRF): A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/com.jfinal/jfinal/CVE-2023-49381/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2023-49381 Cross-Site Request Forgery (CSRF): JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/golang/github.com/knadh/listmonk/CVE-2025-58430/ listmonk: CSRF to XSS Chain can Lead to Admin Account Takeover | GitLab Advisory Database (GLAD) CVE-2025-58430 listmonk: CSRF to XSS Chain can Lead to Admin Account Takeover: Cross-Site Request Forgery (CSRF) is an attack that forces an end user to... https://djangotalk.blogspot.com/2015/01/re-csrf-verification-failed-when-i-use_30.html Django talk: Re: CSRF verification failed when I use smart phone Thanks Zach. What are your thoughts after this test? if they match or if they don't match On Wednesday, January 28, 2015 at 9:46:23 PM UTC-... verification failed django talk csrf https://advisories.gitlab.com/maven/org.jvnet.hudson.plugins/analysis-core/CVE-2019-10307/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2019-10307 Cross-Site Request Forgery (CSRF): A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in... cross site request forgery csrf gitlab advisory database https://advisories.gitlab.com/maven/org.jenkins-ci.main/jenkins-core/CVE-2025-27624/ Jenkins cross-site request forgery (CSRF) vulnerability | GitLab Advisory Database (GLAD) CVE-2025-27624 Jenkins cross-site request forgery (CSRF) vulnerability: Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not require POST requests for... cross site request forgery jenkins https://advisories.gitlab.com/maven/org.apache.geode/geode-web/CVE-2025-47410/ Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can... CVE-2025-47410 Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system:... https://cwe.mitre.org/data/definitions/352.html CWE - CWE-352: Cross-Site Request Forgery (CSRF) (4.20) Common Weakness Enumeration (CWE) is a list of software weaknesses. cross site request forgery cwe csrf https://advisories.gitlab.com/golang/github.com/dinever/golf/CVE-2016-15005/ Cross-Site Request Forgery (CSRF) | GitLab Advisory Database (GLAD) CVE-2016-15005 Cross-Site Request Forgery (CSRF): CSRF tokens are generated using math/rand, which is not a cryptographically secure rander number generation,... cross site request forgery csrf gitlab advisory database https://djangotalk.blogspot.com/2022/11/re-forbidden-403-csrf-verification_24.html Django talk: Re: Forbidden (403) - CSRF verification failed. Request aborted. Try adding your ngrok domain to the list of CSRF_TRUSTED_ORIGINS: https://docs.djangoproject.com/en/4.1/ref/settings/#csrf-trusted-origins E... verification failed django talk forbidden csrf https://advisories.gitlab.com/composer/wwbn/avideo/CVE-2026-33649/ AVideo's GET-Based CSRF in setPermission.json.php Enables Privilege Escalation via Arbitrary... CVE-2026-33649 AVideo's GET-Based CSRF in setPermission.json.php Enables Privilege Escalation via Arbitrary Permission Modification: The... https://symfony.com/blog/cve-2022-23601-csrf-token-missing-in-forms CVE-2022-23601: CSRF token missing in forms (Symfony Blog) CVE-2022-23601 fixes CSRF token missing in forms. cve csrf token missing forms https://www.mediawiki.org/wiki/Topic:Plwsfxv66v4bha98 CSRF != XSS on User talk:P858snake/Archive 1 user talk csrf xss archive https://www.okta.com/en-sg/identity-101/csrf-attack/ CSRF Attack: Cross-Site Request Forgery Definition & Defense | Okta cross site request forgery csrf attack definition defense okta https://docs.spring.io/spring-security/site/docs/5.6.3/api/org/springframework/security/taglibs/csrf/package-summary.html org.springframework.security.taglibs.csrf (spring-security-docs 5.6.3 API) springframework security taglibs csrf