Advisories · Weakness
CWE-344.
Every Advisory and CVE whose sources give the weakness CWE-344, newest first.
- CVSS 5.1 Medium
ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens.
- ELECOM CO.,LTD. WAB-BE187-M
- ELECOM CO.,LTD. WAB-BE72-M
- CWE-344
- CVSS 8.6 High
CKAN is vulnerable to session secret shared across instances using Docker images
- ckan
- Weak cryptography or TLS
- CWE-344
- CVSS 5.3 Medium
Use of unclaimed s3 bucket in tests and examples
- Weak cryptography or TLS
- CWE-344
<=1.0.0-M2.1 · no fixed version yet
GHSA-rc39-g977-687w · CVE-2022-36022