Executive brief
etcd Cross-site Request Forgery (CSRF)
Affected products
- Go go.etcd.io/etcd/v3
Junglewise Threat Intelligence
CVE-2018-1098: etcd Cross-site Request Forgery (CSRF)
CVE-2018-1098 · Severity: low · CVSS 3.1 · Published 2022-02-15
Technologies: go.etcd.io/etcd/v3 (Go). Vendors: Go.
Related threats
- GO-2026-4808 - Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd
- GO-2026-4806 - Authorization bypasses in multiple APIs in go.etcd.io/etcd
- GO-2024-2528 - Etcd Gateway TLS endpoint validation only confirms TCP reachability in go.etcd.io/etcd
- GO-2024-2530 - Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in go.etcd.io/etcd
- GO-2024-2529 - Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd