exploitDog

GHSA-p7g5-687r-f7jc

Опубликовано: 12 окт. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 8.1

Описание

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.

Ссылки

EPSS

Процентиль: 73%

0.00758

Низкий

8.1 High

CVSS3

CVE ID

Дефекты

CWE-352

Связанные уязвимости

CVE-2023-43148

CVSS3: 8.1

nvd

больше 2 лет назад

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote attacker to delete all accounts.

EPSS

Процентиль: 73%

0.00758

Низкий

8.1 High

CVSS3

CVE ID

Дефекты

CWE-352