CVE:CVE-2021-32677
CNNVD:CNNVD-202106-752
fastapi-utils是一个应用软件。可重用工具为FastAPI
fastapi-utils存在跨站请求伪造漏洞，该漏洞源于FastAPI 0.65.2版本及以下版本在接收浏览器发送的JSON负载的路径操作中使用cookie进行身份验证，容易受到跨站点请求伪造(CSRF)攻击。
solution:Upgrade fastapi_project fastapi to a higher version than 0.65.2,and avoid the version (,0.65.2); Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34