Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controller
References
Link | Resource |
---|---|
https://github.com/cui2shark/security/blob/main/Added%20CSRF%20in%20Role%20Controller.md | Exploit Third Party Advisory |
https://github.com/cui2shark/security/blob/main/Added%20CSRF%20in%20Role%20Controller.md | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:38
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/cui2shark/security/blob/main/Added%20CSRF%20in%20Role%20Controller.md - Exploit, Third Party Advisory |
19 Jan 2024, 18:37
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-12 15:15
Updated : 2024-11-21 08:38
NVD link : CVE-2023-51949
Mitre link : CVE-2023-51949
CVE.ORG link : CVE-2023-51949
JSON object : View
Products Affected
verydows
- verydows
CWE
CWE-352
Cross-Site Request Forgery (CSRF)