Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Softwaremill Component: Akka-http-session Clear all filters
TI-2020-17268 CVE-2020-28452 · GHSA-4jf5-jggp-g56j

Cross-site request forgery (CSRF) in com.softwaremill.akka-http-session:core_2.12

Priority LOW 39

This affects the package com.softwaremill.akka-http-session:core_2.12 from 0 and before 0.6.1; all versions of package com.softwaremill.akka-http-session:core_2.11; the package com.softwaremill.akka-http-session:core_2.1…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0053 Published 2021-01-20 Fixed in 0.6.1 CWE-352
TI-2020-06297 CVE-2020-7780 · GHSA-q42q-523g-3fwv

Cross-site request forgery (CSRF) in com.softwaremill.akka-http-session:core_2.13

Priority LOW 39

This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.11 before…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00653 Published 2020-11-27 Fixed in 0.5.11 CWE-352