← All advisories

High severity8.8NVD Advisory· Published Dec 9, 2019· Updated Jun 17, 2026

CVE-2019-19685

CVE-2019-19685

Description

RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

nopCommerce/RoxyFilemandescription
Nopsolutions/Nopcommercellm-fuzzy
Range: = 4.2.0
Roxyfileman/Roxyfilemanllm-fuzzy
Range: = 4.2.0

Patches

Vulnerability mechanics

References

1

github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Request-ForgerynvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.