← Back

Tiny Csrf Project

tiny-csrf_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Tiny Csrf
tiny-csrf
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-39287
1Tiny Csrf Project
1Tiny Csrf
Nov 21, 2024
Oct 7, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
tiny-csrf is a Node.js cross site request forgery (CSRF) protection middleware. In versions prior to 1.1.0 cookies were not encrypted and thus CSRF tokens were transmitted in the clear. This issue has been addressed in c...Show more
tiny-csrf is a Node.js cross site request forgery (CSRF) protection middleware. In versions prior to 1.1.0 cookies were not encrypted and thus CSRF tokens were transmitted in the clear. This issue has been addressed in commit `8eead6d` and the patch with be included in version 1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.Show less