EDB-43922

PoC

KeystoneJS < 4.0.0-beta.7 - Cross-Site Request Forgery

view exploit source exploit_dbtype webappsauthor Saurabh Banawarpublished 2018-01-28catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-16570UShigh8.8Exploit
KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan