Lucene search

PRIOn knowledge basePRION:CVE-2023-32625

HistoryJul 21, 2023 - 1:15 a.m.

Cross site request forgery (csrf)

2023-07-2101:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

remote attacker

user authentication

malicious page

settings change

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by having a user view a malicious page.

CPENameOperatorVersion
ts_webfontsle3.1.2

CPE	Name	Operator	Version
	ts_webfonts	le	3.1.2

References

ja.wordpress.org/plugins/ts-webfonts-for-sakura/

jvn.jp/en/jp/JVN90560760/