Описание
Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:senior-walter:web-based_pharmacy_product_management_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00034
Низкий
8.8 High
CVSS3
4.5 Medium
CVSS3
Дефекты
CWE-352
CWE-352
Связанные уязвимости
CVSS3: 8.8
github
3 месяца назад
Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.
EPSS
Процентиль: 10%
0.00034
Низкий
8.8 High
CVSS3
4.5 Medium
CVSS3
Дефекты
CWE-352
CWE-352