cve/2016/CVE-2016-15005.md
2024-05-26 14:27:05 +02:00

793 B

CVE-2016-15005

Description

CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.

POC

Reference

No PoCs from references.

Github