CVE-2026-82468 in Rodauth
요약
\~에 의해 MITRE • 2026. 08. 29.
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to authenticate to attacker-controlled accounts.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.