Cross site request forgery (csrf)

2023-11-2218:15:00

PRIOn knowledge base

www.prio-n.com

cross-site request forgery

sourcecodester sticky notes

php

vulnerability

sensitive information

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.0%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to add-note.php.

CPENameOperatorVersion
sticky_notes_appeq1.0

CPE	Name	Operator	Version
	sticky_notes_app	eq	1.0

References

github.com/emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS/blob/main/README.md