Description
The console in Togglz before 2.9.4 allows CSRF.
Remediation
References
https://github.com/advisories/GHSA-697v-pxg3-j262
https://github.com/togglz/togglz/commit/ed66e3f584de954297ebaf98ea4a235286784707
https://github.com/togglz/togglz/pull/495
Related Vulnerabilities
CVE-2020-8298 Vulnerability in npm package fs-path
CVE-2022-23059 Vulnerability in maven package com.shopizer:sm-shop-model
CVE-2022-38751 Vulnerability in maven package org.yaml:snakeyaml
CVE-2021-40865 Vulnerability in maven package org.apache.storm:storm-server
CVE-2020-2275 Vulnerability in maven package org.jenkins-ci.plugins:copy-data-to-workspace-plugin