area17/twill · Security
twill is vulnerable to Cross-Site Request Forgery (CSRF)
- GHSA ID
- GHSA-f99g-pg48-wrfc
- CVE ID
- CVE-2021-3932
- Severity
- medium
- Published
- Updated
- CVSS
- 6.3 · CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS v3
- 6.3 · CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Description
twill is vulnerable to Cross-Site Request Forgery (CSRF).
CWEs
- CWE-268 · Privilege Chaining
- CWE-352 · Cross-Site Request Forgery (CSRF)
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-3932 ↗
- https://github.com/area17/twill/commit/81d80d1fbbdd8bb73c020f03c623fd4487bd9b78 ↗
- https://huntr.dev/bounties/6ef21e34-f6d9-445a-b657-375c53dc2b43 ↗
- https://github.com/area17/twill/commit/5cded9fc ↗
- https://github.com/area17/twill/commits/bab94c1e ↗
- https://github.com/area17/twill/releases/tag/1.2.5 ↗
- https://github.com/area17/twill/releases/tag/2.5.3 ↗
- https://github.com/advisories/GHSA-f99g-pg48-wrfc ↗