CVE-2022-28108
high · 8.8Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
8.8
CVSS
11.7%
EPSS (exploit prob.)
96th
EPSS percentile
2022-04-19
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| selenium | selenium_grid | < 4.0.0 |
| selenium | selenium_grid | 4.0.0 |
| selenium | selenium_grid | 4.0.0 |
| selenium | selenium_grid | 4.0.0 |
| selenium | selenium_grid | 4.0.0 |
| selenium | selenium_grid | 4.0.0 |
| selenium | selenium_grid | 4.0.0 |
| selenium | selenium_grid | 4.0.0 |
Check a specific version with /api/v1/cve/match.
References
- https://www.gabriel.urdhr.fr/2022/02/07/selenium-standalone-server-csrf-dns-rebinding-rce/
- https://www.openwall.com/lists/oss-security/2022/02/07/3
- https://www.selenium.dev/downloads/
- https://www.gabriel.urdhr.fr/2022/02/07/selenium-standalone-server-csrf-dns-rebinding-rce/
- https://www.openwall.com/lists/oss-security/2022/02/07/3
- https://www.selenium.dev/downloads/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2022-28108