| Название | birkir prime <=0.4.0 CSRF |
|---|
| Описание | In the latest version of Prime (v0.4.0), its GraphQL enables the client to make query requests based on the GET method by default. This would allow attackers to exploit this vulnerability to launch CSRF attacks against privileged users.
|
|---|
| Источник | ⚠️ https://github.com/birkir/prime/issues/547 |
|---|
| Пользователь | ZAST.AI (UID 87884) |
|---|
| Представление | 04.01.2026 14:48 (10 месяцы назад) |
|---|
| Модерация | 19.01.2026 08:15 (15 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 341763 [birkir prime до 0.4.0.beta.0 подделка межсайтовых запросов] |
|---|
| Баллы | 16 |
|---|