CVE-2022-28108

Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and…

published April 19, 2022

CVSS

—

EPSS

22%

Percentile

97.7

In the wild

Unconfirmed

What it is

Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.22193 · 97.7th percentile
Published: 2022-04-19T02:55Z

EPSS history

Timeline

15 OCT 03:17Z
EPSS moved 12% → 22%
epss
19 APR 02:55Z
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and…
cvelistv5