CVE-2021-28490: CSRF
Published Aug 19, 2021
·Updated
In OWASP CSRFGuard through 3.1.0, CSRF can occur because the CSRF cookie may be retrieved by using only a session token.
Affected Software
2 affected components
OWASP CSRFGuard<=3.1.0
OWASP CSRFGuard=4.0-rc1
Event History
Aug 19, 2021
CVE Published
via MITRE·06:44 PM
Data Sourced
via MITRE·06:44 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-28490.
2
What is the title of this vulnerability?
The title of this vulnerability is 'In OWASP CSRFGuard through 3.1.0 CSRF can occur because the CSRF cookie may be retrieved by using on…'
3
What is the severity of this vulnerability?
The severity of this vulnerability is high.
4
How does this vulnerability occur?
This vulnerability occurs because the CSRF cookie may be retrieved by using only a session token.
5
What is the affected software?
The affected software is OWASP CSRFGuard versions 3.1.0 and 4.0-rc1.
6
How can I fix this vulnerability?
To fix this vulnerability, you should update OWASP CSRFGuard to a version that is not affected.