CVE-2022-30694 - How Weak Origin Checking in /FormLogin Exposes Your Service to Login CSRF Attacks
In summer 2022, a critical vulnerability—CVE-2022-30694—surfaced, targeting applications and web services using a common login path: /FormLogin. The essence of this bug boils