2 matches found
CVE-2026-73292
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/id/password endpoint accepts a cross-site request using the authenticated user's semaphore session cookie without CSRF protection or current-password confirmation, allowing an unauthenticated attacker to...
8.7CVSS5.9AI score0.00232EPSS
SaveExploits0References7
CVE-2026-73292: Cross-Site Request Forgery (CSRF)
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/id/password endpoint accepts a cross-site request using the authenticated user's semaphore session cookie without CSRF protection or current-password confirmation, allowing an unauthenticated attacker to...
8.3CVSS5.9AI score0.00232EPSS
SaveExploits0References3
20