https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 17:55:36 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-92751 <p>CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers can craft hidden forms that submit to destructive endpoints like topic deletion and cluster configuration changes, leveraging the operator&#39;s HTTP Basic authentication credentials or play-basic-authentication cookie without SameSite protection.</p> <p>CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers can craft hidden forms that submit to destructive endpoints like topic deletion and cluster configuration changes, leveraging the operator&#39;s HTTP Basic authentication credentials or play-basic-authentication cookie without SameSite protection.</p> https://db.gcve.eu/vuln/fkie_cve-2026-92751 https://db.gcve.eu/vuln/ghsa-f8jr-q32f-87q5 <p>CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers can craft hidden forms that submit to destructive endpoints like topic deletion and cluster configuration changes, leveraging the operator&#39;s HTTP Basic authentication credentials or play-basic-authentication cookie without SameSite protection.</p> <p>CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers can craft hidden forms that submit to destructive endpoints like topic deletion and cluster configuration changes, leveraging the operator&#39;s HTTP Basic authentication credentials or play-basic-authentication cookie without SameSite protection.</p> https://db.gcve.eu/vuln/ghsa-f8jr-q32f-87q5