Cross-Site Request Forgery (CSRF) — CVEs by weakness type

Dedecms HIGH 8.8

CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php.

No fix yet

Fix from $1,950 2024-03-13

Dedecms HIGH 8.8

CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php.

No fix yet

Fix from $1,950 2024-03-13

Unclassified MEDIUM 6.5

CVE-2024-2416

Cross-Site Request Forgery vulnerability in Movistar's 4G router affecting version ES_WLD71-T1_v2.0.201820. This vulnerability allows an attacker to …

Mitigation only

Fix from $1,600 2024-03-13

Dreamer Cms MEDIUM 6.5

CVE-2024-2354

A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit.…

Mitigation only

Fix from $1,600 2024-03-10

Digits HIGH 8.8

CVE-2024-0203

The Digits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.1. This is due to missing nonce val…

Fix: after 8.4.2

Fix from $1,950 2024-03-07

Docker Build Step MEDIUM 6.1

CVE-2024-2215

A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-spe…

Fix: after 2.11

Fix from $1,600 2024-03-06

Flycms HIGH 7.4

CVE-2024-27694

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit.

No fix yet

Fix from $1,950 2024-03-04

Product Designer HIGH 8.1

CVE-2024-26469

Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, al…

Fix: 1.178.36+

Fix from $1,950 2024-03-03

Hospital Automanager MEDIUM 6.5

CVE-2024-2134

A vulnerability has been found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This vulnerability affects unknown code of…

Fix: after 2024-02-23

Fix from $1,600 2024-03-03

Stupid Simple Cms MEDIUM 6.3

CVE-2024-27559

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php

Fix: after 1.2.4

Fix from $1,600 2024-03-01

Stupid Simple Cms HIGH 8.8

CVE-2024-27689

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.

Fix: after 1.2.4

Fix from $1,950 2024-03-01

Mongo Express MEDIUM 6.1

CVE-2023-52555

In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection.

No fix yet

Fix from $1,600 2024-03-01

Engineering Requirements Management Doors MEDIUM 6.5

CVE-2023-28949

IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious …

Mitigation only

Fix from $1,600 2024-03-01

Ajax Search MEDIUM 6.1

CVE-2024-21752

Cross-Site Request Forgery (CSRF) vulnerability in Ernest Marcinko Ajax Search Lite allows Reflected XSS.This issue affects Ajax Search Lite: from n/…

Fix: 4.11.5+

Fix from $1,600 2024-02-29

Thrive Automator HIGH 8.8

CVE-2023-51531

Cross-Site Request Forgery (CSRF) vulnerability in Thrive Themes Thrive Automator.This issue affects Thrive Automator: from n/a through 1.17.

Fix: 1.17.1+