taoensso/sente

taoensso/sente

GitHubGitHub
GitHubgithub.com
www.taoensso.comwww.taoensso.com
Releases66
Frequency2 months 4 days
Last Release
Stars1.79K
Realtime web comms library for Clojure/Script
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-1000022↗
—6.8 MEDIUM

Taoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery (CSRF) vulnerability in WebSocket handshake endpoint that can result in CSRF attack, possible leak of anti-CSRF token. This attack appears to be exploitable via malicious request against WebSocket handshake endpoint. This vulnerability appears to have been fixed in 1.14.0 and later.