Description
The console in Togglz before 2.9.4 allows CSRF.
Remediation
References
https://github.com/advisories/GHSA-697v-pxg3-j262
https://github.com/togglz/togglz/commit/ed66e3f584de954297ebaf98ea4a235286784707
https://github.com/togglz/togglz/pull/495
Related Vulnerabilities
CVE-2019-14862 Vulnerability in maven package org.webjars.bower:knockout
CVE-2021-39235 Vulnerability in maven package org.apache.ozone:ozone-main
CVE-2020-4051 Vulnerability in maven package org.webjars.bowergithub.dojo:dijit
CVE-2019-10330 Vulnerability in maven package org.jenkins-ci.plugins:gitea
CVE-2021-25122 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core