CWE-352
Cross-Site Request Forgery (CSRF)
Description
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Hierarchy (View 1000)
Parents
Children
none
Related attack patterns (CAPEC)
CAPEC-111 · CAPEC-462 · CAPEC-467 · CAPEC-62
CVEs mapped to this weakness (9,651)
page 23 of 483| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-42608 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php. | ||
| CVE-2024-42586 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42585 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42584 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42583 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42582 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42581 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42580 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42579 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42577 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42576 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. | ||
| CVE-2024-42557 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. | ||
| CVE-2024-42555 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. | ||
| CVE-2024-42553 | Hig | 0.57 | 8.8 | 0.00 | Aug 20, 2024 | A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. | ||
| CVE-2024-42627 | Hig | 0.57 | 8.8 | 0.00 | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3. | ||
| CVE-2024-42626 | Hig | 0.57 | 8.8 | 0.00 | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. | ||
| CVE-2024-42625 | Hig | 0.57 | 8.8 | 0.00 | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add | ||
| CVE-2024-42624 | Hig | 0.57 | 8.8 | 0.00 | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10. | ||
| CVE-2024-42623 | Hig | 0.57 | 8.8 | 0.00 | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1 | ||
| CVE-2024-42632 | Hig | 0.57 | 8.8 | 0.00 | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add. |
- risk 0.57cvss 8.8epss 0.00
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.
- risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3.
- risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add.
- risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/add
- risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/delete/10.
- risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/layout/delete/1
- risk 0.57cvss 8.8epss 0.00
FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/page/add.