Security Advisory

CVE-2022-28108

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-19 02:55:37
Last updated 2024-08-03 05:48:36
Assigner mitre
State PUBLISHED

Description

Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.