CVE-2020-25070

2020-09-0121:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

USVN (aka User-friendly SVN) before 1.0.10 allows CSRF, related to the lack of the SameSite Strict feature.

CPENameOperatorVersion
usvneq1.0.1
usvneq1.0.4
usvneq1.0.6
usvneq1.0.2
usvneq1.0.7
usvneq1.0.3
usvneq1.0.5
usvneq1.0.9
usvneqdelete

Name	Operator	Version
usvn	eq	1.0.1
usvn	eq	1.0.4
usvn	eq	1.0.6
usvn	eq	1.0.2
usvn	eq	1.0.7
usvn	eq	1.0.3
usvn	eq	1.0.5
usvn	eq	1.0.9
usvn	eq	delete

References

www.usvn.info/2020/08/02/usvn-1.0.10