Lucene search
GoogleOSV:CVE-2023-34927HistoryJun 22, 2023 - 1:15 p.m.
CVE-2023-34927
2023-06-2213:15:10
Google
osv.dev
4
casdoor
csrf
vulnerability
endpoint
set-password
attackers
password
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user’s password via supplying a crafted URL.
Related
prion
prion
Cross site request forgery (csrf)
2023-06-22 13:15:00
cvelist
cvelist
CVE-2023-34927
2023-06-22 00:00:00
github
github
Casdoor Cross-Site Request Forgery vulnerability
2023-06-22 15:30:23
cve
cve
CVE-2023-34927
2023-06-22 13:15:10
osv
osv
Casdoor Cross-Site Request Forgery vulnerability
2023-06-22 15:30:23
veracode
veracode
Cross-Site Request Forgery (CSRF)
2023-07-04 10:11:53
Cross-Site Request Forgery (CSRF)
2023-06-23 11:13:23
nvd
nvd
CVE-2023-34927
2023-06-22 13:15:10
exploitdb
exploitdb
Casdoor < v1.331.0 - '/api/set-password' CSRF
2024-04-02 00:00:00