https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:47:40 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-07325 cnvd-2016-07325 https://cve.radiocsirt.org/vuln/cnvd-2016-07325 https://cve.radiocsirt.org/vuln/euvd-2026-86352 EUVD-2026-86352 https://cve.radiocsirt.org/vuln/euvd-2026-86352 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7034 <p>The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to (1) bypass CSRF protection mechanisms or (2) conduct cross-site request forgery (CSRF) attacks by obtaining an old token.</p> <p>The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to (1) bypass CSRF protection mechanisms or (2) conduct cross-site request forgery (CSRF) attacks by obtaining an old token.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-7034 https://cve.radiocsirt.org/vuln/ghsa-29p9-chjc-5c6w <p>The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to (1) bypass CSRF protection mechanisms or (2) conduct cross-site request forgery (CSRF) attacks by obtaining an old token.</p> <p>The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to (1) bypass CSRF protection mechanisms or (2) conduct cross-site request forgery (CSRF) attacks by obtaining an old token.</p> https://cve.radiocsirt.org/vuln/ghsa-29p9-chjc-5c6w https://cve.radiocsirt.org/vuln/gsd-2016-7034 gsd-2016-7034 https://cve.radiocsirt.org/vuln/gsd-2016-7034 https://cve.radiocsirt.org/vuln/rhsa-2017:0557 <p>Dashbuilder: Reflected XSS Dashbuilder: insecure handling of CSRF token Dashbuilder: Lack of clickjacking protection on the login page</p> <p>Dashbuilder: Reflected XSS Dashbuilder: insecure handling of CSRF token Dashbuilder: Lack of clickjacking protection on the login page</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0557