High severity8.8NVD Advisory· Published Sep 1, 2020· Updated Jun 17, 2026

CVE-2020-23836

Description

A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admin visits a third-party site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OSWAPP/Warehouse Inventory Systemdescription
Siamon123/warehouse-inventory-systemllm-create
Range: <=2020-08-10

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48738nvdExploitThird Party Advisory
github.com/siamon123/warehouse-inventory-system/issues/55nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000