Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rj2q-jjmp-m73j

Опубликовано: 22 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user information. This vulnerability occurs due to improper validation of user requests, which enables attackers to exploit the system by tricking the admin user into executing malicious scripts.

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user information. This vulnerability occurs due to improper validation of user requests, which enables attackers to exploit the system by tricking the admin user into executing malicious scripts.

EPSS

Процентиль: 1%
0.00011
Низкий

7.3 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 7.3
nvd
около 1 года назад

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user information. This vulnerability occurs due to improper validation of user requests, which enables attackers to exploit the system by tricking the admin user into executing malicious scripts.

EPSS

Процентиль: 1%
0.00011
Низкий

7.3 High

CVSS3

Дефекты

CWE-352