Alertes
 

Notre sélection d'alertes et avis SSI.
Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

mardi 19 janvier 2021

fastify-csrf Package up to 3.0.0.0 query cookie without 'httponly' flag

A vulnerability was found in fastify-csrf Package up to 3.0.0.0. It has been declared as critical. This vulnerability affects some unknown functionality. Upgrading to version 3.0.0.1 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Lien vers l'article source

socket.io Packet up to 2.3.x CORS unknown vulnerability [CVE-2020-28481] Mautic up to 3.2.3 Javascript File cross site scripting
Auteur: VulDB

Catégories: VulDBNombre de vues: 57

x

Événements SSI