Lucene search
GoogleOSV:GHSA-3WW4-CP53-6G2XHistoryOct 18, 2021 - 7:44 p.m.
Cross Site Request Forgery in kindeditor
2021-10-1819:44:06
Google
osv.dev
13
0.001 Low
EPSS
Percentile
43.3%
Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x. First, you upload an html file containing csrf on the website that uses a google editor, (you only need to search in google: inurl:/examples/uploadbutton.html) and then use the authority of this website to trick users into clicking your malicious html link.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kindeditor | le | 4.1.12 |
Related
cnvd
cnvd
KindEdirot Cross-Site Request Forgery Vulnerability
2021-10-18 00:00:00
osv
osv
CVE-2021-42228
2021-10-14 17:15:00
prion
prion
Cross site request forgery (csrf)
2021-10-14 17:15:00
cvelist
cvelist
CVE-2021-42228
2021-10-14 16:38:58
github
github
Cross Site Request Forgery in kindeditor
2021-10-18 19:44:06
cve
cve
CVE-2021-42228
2021-10-14 17:15:08
nvd
nvd
CVE-2021-42228
2021-10-14 17:15:08