mirror of
https://github.com/0xMarcio/cve.git
synced 2026-02-14 16:32:48 +00:00
784 B
784 B
CVE-2016-15005
Description
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.
POC
Reference
No PoCs from references.