Описание
PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the missing SameSite= attribute on cookies and the ability to refresh cookies. Commit 14acb704891245bf1703ce6296d62112e85aa995 patches the issue.
Уязвимые конфигурации
Конфигурация 1Версия до 0.9.0 (исключая)
cpe:2.3:a:pwndoc_project:pwndoc:*:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.0007
Низкий
6.8 Medium
CVSS3
8.1 High
CVSS3
Дефекты
CWE-352
EPSS
Процентиль: 21%
0.0007
Низкий
6.8 Medium
CVSS3
8.1 High
CVSS3
Дефекты
CWE-352