droppy

No CSRF Validation

Severity: high

Overview

Affected versions of droppy are vulnerable to cross-site socket forgery. The package does not perform verification for cross-domain websocket requests, and as a result, an attacker can create a web page that opens up a websocket connection on behalf of the user visiting the page. The attacker can then perform any action that the target user could, including adding a new admin account under their control, or deleting others.

Remediation

Update to version 3.5.0 or later.

Vulnerable versions

0.5.7
5 years ago
0.5.8
5 years ago
0.5.9
5 years ago
0.5.10
5 years ago
0.5.11
5 years ago
0.5.12
5 years ago
0.6.0
5 years ago
0.6.1
5 years ago
0.6.2
5 years ago
0.6.3
5 years ago
0.6.4
5 years ago
0.6.5
5 years ago
0.6.6
5 years ago
0.6.7
5 years ago
0.6.8
5 years ago
0.6.9
5 years ago
0.6.10
5 years ago
0.6.11
5 years ago
0.6.12
5 years ago
0.6.13
5 years ago
0.6.14
5 years ago
0.6.15
5 years ago
0.6.16
5 years ago
0.6.17
5 years ago
0.6.18
5 years ago
0.6.19
5 years ago
0.7.1
5 years ago
0.7.2
5 years ago
0.7.3
5 years ago
0.7.4
5 years ago
0.7.5
5 years ago
0.7.6
5 years ago
0.7.7
5 years ago
0.7.8
5 years ago
0.7.9
5 years ago
0.7.10
5 years ago
0.7.11
5 years ago
0.7.12
5 years ago
0.7.13
5 years ago
0.7.14
5 years ago
0.7.15
5 years ago
0.7.16
5 years ago
0.7.17
5 years ago
0.7.18
5 years ago
0.7.19
5 years ago
0.7.20
5 years ago
0.7.21
5 years ago
0.7.22
5 years ago
0.7.23
5 years ago
0.7.24
5 years ago
0.7.25
5 years ago
0.7.26
5 years ago
0.7.27
5 years ago
0.7.28
5 years ago
0.8.0
5 years ago
0.8.1
5 years ago
0.8.2
5 years ago
0.8.3
5 years ago
0.8.4
4 years ago
0.9.0
4 years ago
0.9.1
4 years ago
0.9.2
4 years ago
0.9.3
4 years ago
0.9.4
4 years ago
0.9.5
4 years ago
0.9.6
4 years ago
0.9.7
4 years ago
0.9.8
4 years ago
0.9.9
4 years ago
0.9.10
4 years ago
0.9.11
4 years ago
0.9.12
4 years ago
0.9.13
4 years ago
0.9.14
4 years ago
0.9.15
4 years ago
0.9.16
4 years ago
0.9.17
4 years ago
0.9.18
4 years ago
0.9.19
4 years ago
0.9.20
4 years ago
0.9.21
4 years ago
0.9.22
4 years ago
0.9.23
4 years ago
0.9.24
4 years ago
0.9.25
4 years ago
0.9.26
4 years ago
0.9.27
4 years ago
0.9.28
4 years ago
0.9.29
4 years ago
0.9.30
4 years ago
0.9.31
4 years ago
0.9.33
4 years ago
0.9.34
4 years ago
0.10.0
4 years ago
0.10.1
4 years ago
0.10.2
4 years ago
0.10.3
4 years ago
0.10.4
4 years ago
0.10.5
4 years ago
0.10.6
4 years ago
0.10.7
4 years ago
0.10.8
4 years ago
0.10.9
4 years ago
1.0.0
4 years ago
1.0.1
4 years ago
1.0.2
4 years ago
1.0.3
4 years ago
1.0.4
4 years ago
1.0.5
4 years ago
1.0.6
4 years ago
1.0.7
4 years ago
1.0.8
4 years ago
1.0.9
4 years ago
1.0.10
4 years ago
1.0.11
4 years ago
1.0.12
4 years ago
1.0.13
4 years ago
1.0.14
4 years ago
1.0.15
4 years ago
1.0.16
4 years ago
1.0.17
4 years ago
1.0.18
4 years ago
1.0.19
4 years ago
1.0.20
4 years ago
1.0.21
4 years ago
1.0.22
4 years ago
1.0.23
4 years ago
1.0.24
4 years ago
1.0.25
4 years ago
1.0.26
4 years ago
1.0.27
4 years ago
1.0.28
4 years ago
1.0.29
4 years ago
1.0.30
4 years ago
1.0.31
4 years ago
1.0.32
4 years ago
1.0.33
4 years ago
1.1.0
4 years ago
1.1.1
4 years ago
1.1.2
4 years ago
1.1.3
4 years ago
1.1.4
4 years ago
1.2.0
4 years ago
1.2.1
4 years ago
1.2.2
4 years ago
1.2.3
4 years ago
1.3.0
4 years ago
1.3.1
4 years ago
1.3.2
4 years ago
1.3.3
4 years ago
1.3.4
4 years ago
1.3.5
4 years ago
1.3.6
4 years ago
1.3.7
4 years ago
1.3.8
4 years ago
1.3.9
4 years ago
1.3.10
4 years ago
1.3.11
4 years ago
1.3.12
4 years ago
1.3.13
4 years ago
1.3.14
4 years ago
1.3.15
4 years ago
1.3.16
4 years ago
1.3.17
4 years ago
1.3.18
4 years ago
1.3.19
4 years ago
1.3.20
4 years ago
1.3.21
4 years ago
1.3.22
4 years ago
1.3.23
4 years ago
1.3.24
4 years ago
1.3.25
4 years ago
1.3.26
4 years ago
1.3.27
4 years ago
1.3.28
4 years ago
1.3.29
4 years ago
1.3.30
4 years ago
1.3.31
4 years ago
1.3.32
4 years ago
1.3.33
4 years ago
1.3.34
4 years ago
1.3.35
4 years ago
1.3.36
4 years ago
1.4.0
4 years ago
1.4.1
4 years ago
1.4.2
4 years ago
1.4.3
4 years ago
1.4.4
4 years ago
1.4.5
4 years ago
1.4.6
4 years ago
1.4.7
4 years ago
1.4.8
4 years ago
1.4.9
4 years ago
1.4.10
4 years ago
1.4.11
4 years ago
1.4.12
4 years ago
1.4.13
4 years ago
1.4.14
4 years ago
1.4.15
4 years ago
1.4.16
4 years ago
1.5.0
4 years ago
1.5.1
4 years ago
1.5.2
4 years ago
1.5.3
4 years ago
1.5.4
4 years ago
1.5.5
4 years ago
1.6.0
4 years ago
1.6.1
4 years ago
1.6.2
4 years ago
1.6.3
4 years ago
1.7.0
4 years ago
1.7.1
4 years ago
1.7.2
4 years ago
1.7.3
4 years ago
1.7.4
4 years ago
1.7.5
4 years ago
1.7.6
4 years ago
1.7.7
4 years ago
1.7.8
4 years ago
1.7.9
4 years ago
1.7.10
4 years ago
1.7.11
4 years ago
1.7.12
4 years ago
1.7.13
4 years ago
1.7.14
4 years ago
1.7.15
4 years ago
1.7.16
4 years ago
1.7.17
4 years ago
1.8.0
4 years ago
1.8.1
4 years ago
1.8.2
4 years ago
1.8.3
4 years ago
1.8.4
4 years ago
1.9.0
4 years ago
1.9.1
4 years ago
1.9.2
4 years ago
1.9.3
3 years ago
1.9.4
3 years ago
1.9.5
3 years ago
1.9.6
3 years ago
1.9.7
3 years ago
1.9.8
3 years ago
1.9.9
3 years ago
1.9.10
3 years ago
1.9.11
3 years ago
1.9.12
3 years ago
1.9.13
3 years ago
1.9.14
3 years ago
1.9.15
3 years ago
1.9.16
3 years ago
1.9.17
3 years ago
1.9.18
3 years ago
1.9.19
3 years ago
1.9.20
3 years ago
1.9.21
3 years ago
1.9.22
3 years ago
1.9.23
3 years ago
1.9.24
3 years ago
1.9.25
3 years ago
1.9.27
3 years ago
1.9.28
3 years ago
1.9.29
3 years ago
1.9.30
3 years ago
1.9.31
3 years ago
1.9.32
3 years ago
1.9.33
3 years ago
1.9.34
3 years ago
1.9.35
3 years ago
1.9.36
3 years ago
1.9.37
3 years ago
1.9.38
3 years ago
2.0.0
3 years ago
2.0.1
3 years ago
2.0.2
3 years ago
2.0.3
3 years ago
2.0.4
3 years ago
2.0.5
3 years ago
2.0.6
3 years ago
2.0.7
3 years ago
2.0.8
3 years ago
2.0.9
3 years ago
2.0.10
3 years ago
2.0.11
3 years ago
2.0.12
3 years ago
2.1.0
3 years ago
2.1.1
3 years ago
2.1.2
3 years ago
2.1.3
3 years ago
2.1.4
3 years ago
2.1.5
3 years ago
2.1.6
3 years ago
2.1.7
3 years ago
2.1.8
3 years ago
2.1.9
3 years ago
2.1.10
3 years ago
2.1.11
3 years ago
2.1.12
3 years ago
2.1.13
3 years ago
2.1.14
3 years ago
2.1.15
3 years ago
2.1.16
3 years ago
2.1.17
3 years ago
2.1.18
3 years ago
2.1.19
3 years ago
2.1.20
3 years ago
2.1.21
3 years ago
2.1.22
3 years ago
2.2.0
3 years ago
2.2.1
3 years ago
2.2.2
3 years ago
2.2.3
3 years ago
2.2.4
3 years ago
2.3.0
3 years ago
2.3.1
3 years ago
2.3.2
3 years ago
2.3.3
3 years ago
2.3.4
3 years ago
2.3.5
3 years ago
2.3.6
3 years ago
2.3.7
3 years ago
2.3.8
3 years ago
2.3.9
3 years ago
2.3.10
3 years ago
2.3.11
3 years ago
2.3.12
3 years ago
2.3.13
3 years ago
2.3.14
3 years ago
2.3.15
3 years ago
2.3.16
3 years ago
2.3.17
3 years ago
2.3.18
3 years ago
2.3.19
3 years ago
2.3.20
3 years ago
2.3.21
3 years ago
2.3.22
3 years ago
2.4.0
3 years ago
2.4.1
3 years ago
2.4.2
3 years ago
2.4.3
3 years ago
2.4.4
3 years ago
2.4.5
3 years ago
2.4.6
3 years ago
2.4.7
3 years ago
2.4.8
3 years ago
2.4.9
3 years ago
2.5.0
3 years ago
3.0.0
3 years ago
3.0.1
3 years ago
3.0.2
3 years ago
3.0.3
3 years ago
3.0.4
3 years ago
3.0.5
3 years ago
3.0.6
3 years ago
3.0.7
3 years ago
3.0.8
3 years ago
3.0.9
3 years ago
3.0.10
3 years ago
3.1.0
3 years ago
3.1.1
3 years ago
3.1.2
3 years ago
3.1.3
3 years ago
3.1.4
3 years ago
3.1.5
3 years ago
3.2.0
3 years ago
3.2.1
3 years ago
3.2.2
3 years ago
3.2.3
3 years ago
3.2.4
3 years ago
3.2.5
3 years ago
3.2.6
3 years ago
3.2.7
3 years ago
3.2.8
3 years ago
3.2.9
3 years ago
3.2.10
3 years ago
3.2.11
3 years ago
3.2.12
3 years ago
3.2.13
3 years ago
3.2.14
3 years ago
3.3.0
3 years ago
3.3.1
3 years ago
3.4.0
3 years ago

Unaffected versions

0.9.32-0
4 years ago
3.5.0
3 years ago
3.5.1
3 years ago
3.5.2
3 years ago
3.5.3
3 years ago
3.5.5
3 years ago
3.6.0
3 years ago
3.6.1
3 years ago
3.6.2
3 years ago
3.6.3
3 years ago
3.6.4
3 years ago
3.6.5
3 years ago
3.6.6
3 years ago
3.6.7
3 years ago
3.6.8
3 years ago
3.7.0
3 years ago
3.7.1
3 years ago
3.7.2
3 years ago
3.7.3
3 years ago
3.7.4
3 years ago
3.7.5
3 years ago
3.8.0
3 years ago
3.8.1
3 years ago
3.8.2
3 years ago
3.8.3
3 years ago
3.8.4
3 years ago
3.8.5
3 years ago
3.8.6
3 years ago
3.8.7
3 years ago
3.8.8
3 years ago
3.8.9
3 years ago
3.8.10
3 years ago
3.8.11
3 years ago
3.8.12
3 years ago
3.8.13
3 years ago
3.8.14
3 years ago
3.8.15
2 years ago
3.8.16
2 years ago
3.8.17
2 years ago
3.8.18
2 years ago
3.8.19
2 years ago
3.8.20
2 years ago
3.8.21
2 years ago
3.9.0
2 years ago
3.9.1
2 years ago
3.9.2
2 years ago
3.9.3
2 years ago
3.9.4
2 years ago
3.9.5
2 years ago
3.9.6
2 years ago
3.9.7
2 years ago
3.9.8
2 years ago
3.9.9
2 years ago
4.0.0
2 years ago
4.0.1
2 years ago
4.0.2
2 years ago
4.1.0
2 years ago
4.1.1
2 years ago
4.1.2
2 years ago
4.1.3
2 years ago
4.1.4
2 years ago
4.1.5
2 years ago
4.1.6
2 years ago
4.1.7
2 years ago
4.1.8
2 years ago
4.1.9
2 years ago
4.1.10
2 years ago
4.1.11
2 years ago
4.2.0
2 years ago
4.2.2
2 years ago
4.2.3
2 years ago
4.2.4
2 years ago
4.2.5
2 years ago
4.2.6
2 years ago
4.2.7
2 years ago
4.2.8
2 years ago
4.2.9
2 years ago
4.2.10
2 years ago
4.2.11
2 years ago
4.2.12
2 years ago
4.2.13
2 years ago
4.3.0
2 years ago
5.0.0
2 years ago
5.0.1
2 years ago
5.0.2
2 years ago
5.0.3
2 years ago
5.0.4
2 years ago
5.0.5
2 years ago
5.0.6
2 years ago
5.0.7
2 years ago
5.0.8
2 years ago
5.0.9
2 years ago
5.0.10
2 years ago
5.0.11
2 years ago
5.0.12
2 years ago
5.0.13
2 years ago
5.0.14
2 years ago
5.0.15
2 years ago
5.1.0
2 years ago
5.1.1
2 years ago
5.1.2
2 years ago
5.1.3
2 years ago
5.1.4
2 years ago
5.1.5
2 years ago
5.1.6
2 years ago
5.1.7
2 years ago
5.1.8
2 years ago
5.1.9
2 years ago
5.1.10
2 years ago
5.1.11
2 years ago
5.1.12
2 years ago
5.1.13
2 years ago
5.1.14
2 years ago
5.1.15
2 years ago
5.1.16
2 years ago
5.1.17
2 years ago
5.1.18
2 years ago
5.1.19
2 years ago
5.1.20
2 years ago
5.1.21
2 years ago
5.1.22
2 years ago
5.1.23
2 years ago
5.1.24
2 years ago
5.2.0
2 years ago
5.2.1
2 years ago
5.2.2
2 years ago
5.2.3
2 years ago
5.2.4
2 years ago
5.2.5
2 years ago
5.2.6
2 years ago
5.2.7
2 years ago
5.2.8
2 years ago
5.2.9
2 years ago
5.3.0
2 years ago
5.3.1
2 years ago
5.3.2
2 years ago
5.3.3
2 years ago
5.3.4
2 years ago
5.3.5
2 years ago
5.3.6
2 years ago
5.3.7
2 years ago
5.3.8
2 years ago
5.3.9
2 years ago
5.3.10
2 years ago
5.4.0
2 years ago
5.4.1
2 years ago
6.0.0
2 years ago
6.0.1
2 years ago
6.0.2
2 years ago
6.0.3
a year ago
6.0.4
a year ago
6.0.5
a year ago
6.0.6
a year ago
6.0.7
a year ago
6.1.0
a year ago
6.2.0
a year ago
6.2.1
a year ago
6.2.2
a year ago
6.3.0
a year ago
6.3.1
a year ago
6.3.2
a year ago
6.3.3
a year ago
6.3.4
a year ago
6.3.5
a year ago
6.3.6
a year ago
6.3.7
a year ago
6.3.8
a year ago
6.3.9
a year ago
6.3.10
a year ago
6.3.11
a year ago
6.3.12
a year ago
6.3.13
a year ago
6.3.16
a year ago
6.3.17
a year ago
6.3.18
a year ago
6.4.0
a year ago
6.4.1
a year ago
6.5.0
a year ago
6.5.1
a year ago
6.5.2
a year ago
6.5.3
a year ago
6.5.4
a year ago
6.5.5
a year ago
6.5.6
a year ago
6.6.0
a year ago
6.6.1
a year ago
6.6.2
a year ago
6.6.3
a year ago
6.6.4
a year ago
6.6.5
a year ago
6.6.6
a year ago
6.6.7
a year ago
6.6.8
a year ago
6.6.9
a year ago
6.6.10
a year ago
6.6.11
a year ago
6.6.12
a year ago
6.6.13
a year ago
6.7.0
a year ago
6.7.1
a year ago
6.8.0
a year ago
6.8.1
a year ago
6.8.2
a year ago
6.8.3
a year ago
6.8.4
a year ago
6.8.5
a year ago
6.8.6
a year ago
6.8.7
a year ago
6.8.8
10 months ago
6.8.9
10 months ago
6.8.10
10 months ago
6.8.11
9 months ago
6.9.0
9 months ago
6.9.1
8 months ago
6.9.2
8 months ago
6.9.3
8 months ago
6.9.4
8 months ago
7.0.0
7 months ago
7.0.1
7 months ago
7.0.2
7 months ago
7.0.3
7 months ago
7.0.4
7 months ago
7.0.5
7 months ago
7.0.6
7 months ago
7.0.7
7 months ago
7.0.8
7 months ago
7.0.9
7 months ago
7.1.0
7 months ago
7.1.1
7 months ago
7.1.2
6 months ago
7.2.0
6 months ago
8.0.0
6 months ago
8.0.1
6 months ago
8.0.2
6 months ago
8.0.3
6 months ago
8.0.4
5 months ago
9.0.0
4 months ago
9.0.1
2 months ago
9.0.2
2 months ago
9.1.0
2 months ago
9.1.1
2 months ago
9.1.2
2 months ago
9.1.3
2 months ago
9.1.4
a month ago
9.1.5
5 days ago

Advisory timeline

  1. Published

    Advisory published
    Mar 28th, 2016
  2. Reported

    Initial report by Craig Arendt
    Mar 28th, 2016