Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xmhw-fjw4-m5qf

Опубликовано: 16 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 4.3

Описание

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint (e. x. deletion of the data) without enforcing token verification. 

This issue was fixed in version 1.4.6.

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint (e. x. deletion of the data) without enforcing token verification. 

This issue was fixed in version 1.4.6.

EPSS

Процентиль: 2%
0.00121
Низкий

6.9 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
5 месяцев назад

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint (e. x. deletion of the data) without enforcing token verification.  This issue was fixed in version 1.4.6.

EPSS

Процентиль: 2%
0.00121
Низкий

6.9 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-352