Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-46699
HistoryDec 26, 2023 - 8:15 a.m.

Cross site request forgery (csrf)

2023-12-2608:15:00
PRIOn knowledge base
www.prio-n.com
1
cross-site request forgery
growi
user settings
security vulnerability
nvd

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0. If a user views a malicious page while logging in, settings may be changed without the user’s intention.

CPENameOperatorVersion
growilt6.0.0

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

Related for PRION:CVE-2023-46699