Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c6mv-wgp4-cgj2

Опубликовано: 05 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

EPSS

Процентиль: 9%
0.00032
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1275

Связанные уязвимости

CVSS3: 5.4
nvd
9 месяцев назад

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions.

EPSS

Процентиль: 9%
0.00032
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-1275