Description
The console in Togglz before 2.9.4 allows CSRF.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.togglz:togglz-console | < 2.9.4 | 2.9.4 | GHSA-697v-pxg3-j262 |
High · 8.8
CVE-2020-28191
EUVD-2022-6261GHSA-697v-pxg3-j262
Togglz console missing cross-site request forgery (CSRF) protection
Published Dec 26, 2022 · Updated Apr 14, 2025 · Assigned by mitre