Casdoor CVE-2023-34927 CSRF

Casdoor v2.95.0 and below - CSRF vulnerability in /api/set-password endpoint CVE-2023-34927 from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "Casdoor CVE-2023-34927 CSRF", "description": "Casdoor v2.95.0 and below - CSRF...

CVE-2023-34927

Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery CSRF in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL...

PT-2023-25055

Name of the Vulnerable Software and Affected Versions Casdoor versions 1.331.0 and below Description The issue is related to a Cross-Site Request Forgery CSRF in the "/api/set-password" endpoint. This allows attackers to change a victim user's password by supplying a crafted URL. Recommendations...

CVE-2023-34927: Cross-Site Request Forgery (CSRF)

Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery CSRF in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL...

CVE-2023-34927

Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery CSRF in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL...