mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-06 03:00:55 +00:00
793 B
793 B
CVE-2016-15005
Description
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.
POC
Reference
No PoCs from references.