Archive
14 July 2019
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.8
Mirumee Saleor CSRF Protection Disabled
In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server.