mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-27 13:20:31 +01:00
784 B
784 B
CVE-2016-15005
Description
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.
POC
Reference
No PoCs from references.