Vulnerabilities > Cherokee Project > Cherokee > 1.0.9
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2011-10-07 | CVE-2011-2191 | Cross-Site Request Forgery (CSRF) vulnerability in Cherokee-Project Cherokee Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to vserver/apply. | 6.8 |
| 2011-10-07 | CVE-2011-2190 | Cryptographic Issues vulnerability in Cherokee-Project Cherokee The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack. | 2.1 |