Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:56:47 +0000 cnvd-2019-43403 https://cve.radiocsirt.org/vuln/cnvd-2019-43403 cnvd-2019-43403 https://cve.radiocsirt.org/vuln/cnvd-2019-43403 EUVD-2026-65841 https://cve.radiocsirt.org/vuln/euvd-2026-65841 EUVD-2026-65841 https://cve.radiocsirt.org/vuln/euvd-2026-65841 fkie_cve-2018-12540 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12540 <p>In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.</p> <p>In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12540 GHSA-rvgg-f8qm-6h7j — High severity vulnerability that affects io.vertx:vertx-web https://cve.radiocsirt.org/vuln/ghsa-rvgg-f8qm-6h7j <p><strong>Affected:</strong> Maven: io.vertx:vertx-web</p> <p>In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.</p> <p><strong>Affected:</strong> Maven: io.vertx:vertx-web</p> <p>In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.</p> https://cve.radiocsirt.org/vuln/ghsa-rvgg-f8qm-6h7j gsd-2018-12540 https://cve.radiocsirt.org/vuln/gsd-2018-12540 gsd-2018-12540 https://cve.radiocsirt.org/vuln/gsd-2018-12540 RHSA-2018:2371 — Red Hat Security Advisory: Red Hat OpenShift Application Runtimes security and bug fix update https://cve.radiocsirt.org/vuln/rhsa-2018:2371 <p>vertx: Improper neutralization of CRLF sequences allows remote attackers to inject arbitrary HTTP response headers vertx-web: Incomplete CSRF validation by CSRFHandler</p> <p>vertx: Improper neutralization of CRLF sequences allows remote attackers to inject arbitrary HTTP response headers vertx-web: Incomplete CSRF validation by CSRFHandler</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2371