Luigi version prior to version 2.8.0; after commit 53b52e12745075a8acc016d33945d9d6a7a6aaeb; after GitHub PR spotify/luigi/pull/1870 contains a Cross ite Request Forgery (CSRF) vulnerability in API endpoint: /api/<method…
CVSS 3.0HIGH 8.8·Network·No auth·User interaction·EPSS 0.00807·Published 2018-12-20·Fixed in 2.8.0CWE-352