Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-94hp-7v9h-5qq9

Опубликовано: 01 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, unintended operations may be performed. Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a.

Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, unintended operations may be performed. Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a.

EPSS

Процентиль: 36%
0.00152
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
почти 2 года назад

Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, unintended operations may be performed. Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a.

EPSS

Процентиль: 36%
0.00152
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-352