Edwiser Bridge < 2.0.7 - CSRF Nonce Bypass
Description
The plugin did not properly verify for CSRF nonces, allowing requests without them to bypass the checks in place. This could allow attackers to make logged in users perform unwanted actions.
Affects Plugins
Fixed in version 2.0.7✓
Classification
Miscellaneous
Original Researcher
Jerome Bruandet (NinTechNet)
Verified
Yes
Timeline
Publicly Published
2021-04-16 (about 9 months ago)
Added
2021-04-16 (about 9 months ago)
Last Updated
2022-01-17 (about 7 days ago)