Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-5900

In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a NGINX Controller

  • 3.0.0-3.4.0, 2.0.0-2.9.0, 1.0.1affected

References