https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:58:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08935 bdu:2026-08935 https://cve.radiocsirt.org/vuln/bdu:2026-08935 https://cve.radiocsirt.org/vuln/bit-apisix-2026-49871 <p><strong>Affected:</strong> Bitnami: apisix</p> <p>Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations.</p> <p>This defect allows a remote attacker that manages to send a victim to a webpage controlled by them can cause the victim&#39;s browser to become authenticated as a different identity.</p> <p>Actions the victim takes upstream are then attributed to attackers identity.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: apisix</p> <p>Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations.</p> <p>This defect allows a remote attacker that manages to send a victim to a webpage controlled by them can cause the victim&#39;s browser to become authenticated as a different identity.</p> <p>Actions the victim takes upstream are then attributed to attackers identity.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-apisix-2026-49871 https://cve.radiocsirt.org/vuln/euvd-2026-328982 EUVD-2026-328982 https://cve.radiocsirt.org/vuln/euvd-2026-328982 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49871 <p>Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations.</p> <p>This defect allows a remote attacker that manages to send a victim to a webpage controlled by them can cause the victim&#39;s browser to become authenticated as a different identity.</p> <p>Actions the victim takes upstream are then attributed to attackers identity.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p>Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations.</p> <p>This defect allows a remote attacker that manages to send a victim to a webpage controlled by them can cause the victim&#39;s browser to become authenticated as a different identity.</p> <p>Actions the victim takes upstream are then attributed to attackers identity.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49871 https://cve.radiocsirt.org/vuln/ghsa-rrqp-g94p-gmh7 <p>Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations.</p> <p>This defect allows a remote attacker that manages to send a victim to a webpage controlled by them can cause the victim&#39;s browser to become authenticated as a different identity.</p> <p>Actions the victim takes upstream are then attributed to attackers identity.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p>Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations.</p> <p>This defect allows a remote attacker that manages to send a victim to a webpage controlled by them can cause the victim&#39;s browser to become authenticated as a different identity.</p> <p>Actions the victim takes upstream are then attributed to attackers identity.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-rrqp-g94p-gmh7