Description

The console in Togglz before 2.9.4 allows CSRF.

Remediation

References

https://github.com/advisories/GHSA-697v-pxg3-j262

https://github.com/togglz/togglz/pull/495

https://github.com/togglz/togglz/commit/ed66e3f584de954297ebaf98ea4a235286784707

Related Vulnerabilities

CVE-2023-39155 Vulnerability in maven package org.jenkins-ci.plugins:chef-identity

CVE-2016-10530 Vulnerability in npm package airbrake

CVE-2015-8862 Vulnerability in maven package org.webjars.npm:mustache

CVE-2023-31417 Vulnerability in maven package org.elasticsearch:elasticsearch

CVE-2019-14653 Vulnerability in npm package editor.md

Severity

Critical

Classification

CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Third Party Advisory Patch