CVE-2023-32625

2023-07-2100:49:24

jpcert

www.cve.org

cve-2023-32625

cross-site request forgery

remote unauthenticated attacker

user authentication hijack

malicious page

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by having a user view a malicious page.

CNA Affected

[
  {
    "vendor": "SAKURA internet Inc.",
    "product": "TS Webfonts for SAKURA",
    "versions": [
      {
        "version": "3.1.2 and earlier",
        "status": "affected"
      }
    ]
  }
]