Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-3585

Опубликовано: 18 окт. 2022
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oretnom23:simple_cold_storage_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 36%
0.00149
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863
CWE-352

Связанные уязвимости

CVSS3: 4.3
github
больше 3 лет назад

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 36%
0.00149
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863
CWE-352