https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 06:40:58 +0000 https://db.gcve.eu/vuln/fkie_cve-2025-27792 <p>Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, the protections against cross-site request forgery (CSRF) were insufficient application-wide. The referrer header is checked, and if it is invalid, the server returns 403. However, the referrer header can be dropped from CSRF requests using `&lt;meta name=&#34;referrer&#34; content=&#34;never&#34;&gt;`, effectively bypassing this protection. Version 5.1.1 contains a patch for the issue.</p> <p>Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, the protections against cross-site request forgery (CSRF) were insufficient application-wide. The referrer header is checked, and if it is invalid, the server returns 403. However, the referrer header can be dropped from CSRF requests using `&lt;meta name=&#34;referrer&#34; content=&#34;never&#34;&gt;`, effectively bypassing this protection. Version 5.1.1 contains a patch for the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2025-27792