CVE-2020-5900

In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface

published July 1, 2020

CVSS
—
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Published
2020-07-01T13:59Z
EPSS history
Timeline
  • 01 JUL 13:59Z
    In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface
    cvelistv5