CVE-2022-28108
Published · Updated
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 22%
exploitation probability
22%top 2% of all CVEs
observed exploitation
nono source reports it
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
Affected products
n/a · n/a