Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h988-pxf9-5fjg

Опубликовано: 05 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5

Описание

Mini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery (CSRF), where an attacker can update/delete items in the inventory. The attacker must be logged into the application create a malicious file for updating the inventory details and items.

Mini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery (CSRF), where an attacker can update/delete items in the inventory. The attacker must be logged into the application create a malicious file for updating the inventory details and items.

EPSS

Процентиль: 25%
0.00086
Низкий

5 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5
nvd
почти 4 года назад

Mini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery (CSRF), where an attacker can update/delete items in the inventory. The attacker must be logged into the application create a malicious file for updating the inventory details and items.

EPSS

Процентиль: 25%
0.00086
Низкий

5 Medium

CVSS3

Дефекты

CWE-352