Csrf Magic Project Csrf Magic — known CVE vulnerabilities

Every CVE whose affected-product data names Csrf Magic Project Csrf Magic, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2019-17590 — CVSS 8.8 (high): The csrf_callback function in the CSRF Magic library through 2016-03-27 is vulnerable to CSRF protection bypass as it allows one to tamper…