Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h574-vqwj-2h27

Опубликовано: 01 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and create other admin accounts.

The application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and create other admin accounts.

EPSS

Процентиль: 33%
0.00134
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

The application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and create other admin accounts.

EPSS

Процентиль: 33%
0.00134
Низкий

8.8 High

CVSS3

Дефекты

CWE-352