VYPR
← All advisories
High severity8.8OSV Advisory· Published Feb 4, 2019· Updated Jun 17, 2026

CVE-2019-1000022

CVE-2019-1000022

Description

Taoensso Sente version Prior to version 1.14.0 contains a Cross Site Request Forgery (CSRF) vulnerability in WebSocket handshake endpoint that can result in CSRF attack, possible leak of anti-CSRF token. This attack appears to be exploitable via malicious request against WebSocket handshake endpoint. This vulnerability appears to have been fixed in 1.14.0 and later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Ptaoussanis/SenteOSV2 versions
    v0.10.1, v0.14.1, v0.15.0, …+ 1 more
    • (no CPE)range: v0.10.1, v0.14.1, v0.15.0, …
    • (no CPE)range: <1.14.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.