CVE-2019-1000022
Last modified
CVE-2019-1000022 is a vulnerability of currently unknown severity. Taoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery (CSRF) vulnerability in WebSocket handshake endpoint that can result in CSRF attack, possible leak of anti-CSRF token. This attack appears to be exploitable via malicious request against WebSocket handshake endpoint. EPSS estimates a 0.59% chance of exploitation in the next 30 days.
Description
Taoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery (CSRF) vulnerability in WebSocket handshake endpoint that can result in CSRF attack, possible leak of anti-CSRF token. This attack appears to be exploitable via malicious request against WebSocket handshake endpoint. This vulnerability appears to have been fixed in 1.14.0 and later.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Taoensso | Sente | < 1.14.0 |
References
- https://github.com/ptaoussanis/sente/issues/137Exploit, Issue Tracking, Third Party Advisory
- https://github.com/ptaoussanis/sente/issues/137Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-1000022?
How severe is CVE-2019-1000022?
How do I fix CVE-2019-1000022?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-1000016FFMPEG version 4.1 contains a CWE-129: Improper Validation o…
- CVE-2019-1000017Chamilo Chamilo-lms version 1.11.8 and earlier contains an I…
- CVE-2019-1000018rssh version 2.3.4 contains a CWE-77: Improper Neutralizatio…7.8
- CVE-2019-1000019libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9…6.5
- CVE-2019-1000020libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb…6.5
- CVE-2019-1000021slixmpp version before commit 7cd73b594e8122dddf847953fcfc85…
- CVE-2019-1000023OPT/NET BV OPTOSS Next Gen Network Management System (NG-Net…
- CVE-2019-1000024OPT/NET BV NG-NetMS version v3.6-2 and earlier versions cont…
- CVE-2019-1000030Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2019-1000031A disk space or quota exhaustion issue exists in article2pdf…7.5
- CVE-2019-1000033Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-1000041Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
Are you affected by CVE-2019-1000022?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST