CWE-352

Cross-Site Request Forgery (CSRF)

CompoundStableLikelihood: Medium

Description

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Hierarchy (View 1000)

Parents

CWE-345

Children

none

Related attack patterns (CAPEC)

CAPEC-111 · CAPEC-462 · CAPEC-467 · CAPEC-62

CVEs mapped to this weakness (9,651)

page 22 of 483

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-46394	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Sep 19, 2024	FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
CVE-2024-46086	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Sep 18, 2024	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
CVE-2024-46362	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Sep 17, 2024	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
CVE-2024-46085	FrogCMS FrogCMS	Hig	0.57	8.8	0.00	Sep 17, 2024	FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
CVE-2024-45264	SkySystem Arfa-CMS	Hig	0.57	8.8	0.01	Aug 27, 2024	A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.
CVE-2024-42619	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?id=0&list=whitelist&remove=pligg.com
CVE-2024-42612	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add
CVE-2024-42621	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php
CVE-2024-42618	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma
CVE-2024-42617	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32
CVE-2024-42616	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics
CVE-2024-42613	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet
CVE-2024-42611	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete
CVE-2024-42610	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files
CVE-2024-42609	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars
CVE-2024-42607	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database
CVE-2024-42606	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1
CVE-2024-42605	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1
CVE-2024-42604	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3
CVE-2024-42603	Pligg CMS	Hig	0.57	8.8	0.00	Aug 20, 2024	Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall

CVE-2024-46394HigSep 19, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add
CVE-2024-46086HigSep 18, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123
CVE-2024-46362HigSep 17, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory
CVE-2024-46085HigSep 17, 2024
FrogCMS
FrogCMS
risk 0.57cvss 8.8epss 0.00
FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename
CVE-2024-45264HigAug 27, 2024
SkySystem
Arfa-CMS
risk 0.57cvss 8.8epss 0.01
A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.
CVE-2024-42619HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?id=0&list=whitelist&remove=pligg.com
CVE-2024-42612HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add
CVE-2024-42621HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php
CVE-2024-42618HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma
CVE-2024-42617HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32
CVE-2024-42616HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics
CVE-2024-42613HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet
CVE-2024-42611HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete
CVE-2024-42610HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files
CVE-2024-42609HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars
CVE-2024-42607HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database
CVE-2024-42606HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1
CVE-2024-42605HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1
CVE-2024-42604HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3
CVE-2024-42603HigAug 20, 2024
Pligg
CMS
risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall