Skip to content
OpenAdvisories
Medium WID-SEC-2024-0588 1 CVE

IBM App Connect Enterprise: Schwachstelle ermöglicht Cross-Site Request Forgery

Published Mar 7, 2024 · Updated Mar 7, 2024 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM App Connect Enterprise ausnutzen, um Cross-Site-Scripting-Angriffe, Web-Cache-Poisoning und andere bösartige Aktivitäten durchzuführen

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-45857 Public exploit

    Axios Cross-Site Request Forgery Vulnerability

    An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

    node-axios axios node-axios Debian Ubuntu npm

Revision history

  1. #1

    Initiale Fassung

References