Csrf-Magic Project Csrf-Magic vulnerabilities

1 known vulnerability affecting csrf-magic_project/csrf-magic.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2013-7464HIGHCVSS 8.8fixed in 1.0.42018-08-08
CVE-2013-7464 [HIGH] CWE-352 CVE-2013-7464: In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is not configured, the Anti-CSRF Token use In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is not configured, the Anti-CSRF Token used is predictable and would permit an attacker to bypass the CSRF protections, because an automatically generated secret is not used.
nvd
Csrf-Magic Project Csrf-Magic vulnerabilities | cvebase