Lucene search
HistoryFeb 25, 2023 - 1:15 a.m.
CVE-2023-1033
cve-2023-1033
cross-site request forgery
csrf
github repository
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.7%
Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.
Affected configurations
Node
froxlorfroxlorRange<2.0.11
| CPE | Name | Operator | Version |
|---|---|---|---|
| froxlor:froxlor | froxlor | lt | 2.0.11 |
CNA Affected
[
{
"vendor": "froxlor",
"product": "froxlor/froxlor",
"versions": [
{
"version": "unspecified",
"lessThan": "2.0.11",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site request forgery (csrf)
2023-02-25 01:15:00
cvelist
cvelist
CVE-2023-1033 Cross-Site Request Forgery (CSRF) in froxlor/froxlor
2023-02-25 00:00:00
huntr
huntr
CSRF in all endpoints of /lib/ajax.php by Changing the request method to GET
2023-01-30 09:22:15
veracode
veracode
Cross-Site Request Forgery (CSRF)
2023-03-02 08:41:38
github
github
Froxlor Cross-Site Request Forgery vulnerability
2023-02-25 03:30:17
osv
osv
Froxlor Cross-Site Request Forgery vulnerability
2023-02-25 03:30:17
CVE-2023-1033
2023-02-25 01:15:54
nvd
nvd
CVE-2023-1033
2023-02-25 01:15:54
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.7%
Related for CVE-2023-1033