CoreCVE
Back

MEDIUM

CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header

Published Sep 11, 2018

Description

CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-352

CSRF

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 11, 2018
Updated Aug 5, 2024
Reserved Sep 11, 2018
Link CVE-2018-16832
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-16832
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-16832