CSRF - CVE CyberSecurity Database News (Page 69)

Oct 17, 2022 CSRF

CVE-2022-3031 An issue was found in GitLab CE/EE before 15.1.6, 15.2 before 15.2.4, 15.3 before 15.3.2.

For GitLab Enterprise and Enterprise Extended users, it may also be possible to steal their PGP private keys by performing a similar attack. This issue

Oct 17, 2022 CSRF SQL

CVE-2022-42169 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.

Tenda AC10 V15.03.06.23 contains a SQL Injection vulnerability via /goform/editWifiMacFilter. Tenda AC10 V15.03.06.23 contains a XSS vulnerability via

Oct 17, 2022 CSRF SQL

CVE-2022-42170 Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.

This issue can be exploited through maliciously crafted URL that can cause a Stack overflow on the web-server. Another type of vulnerability that this

Oct 17, 2022 CSRF

CVE-2022-3126 The Frontend File Manager Plugin before 21.4 did not have CSRF check, which could allow attackers to make logged in users upload files on their behalf.

This issue has been fixed in version 2.6.10. Before installing this plugin, you should make sure your site does not use a file

Oct 14, 2022 CSRF

CVE-2022-41586 The communication framework has a vulnerability of not properly truncating data. This may impact data confidentiality.

This vulnerability may lead to the disclosure of sensitive information, e.g. database log information. It has been reported that the web interface of the