11 matches found
CVE-2026-40561
Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...
MAL-2025-40561 Malicious code in ynodejs_mod_metric (npm)
The package ynodejsmodmetric was found to contain malicious code...
CVE-2023-40561
creationtimestamp| type| source ---|---|--- 2023-10-04 18:12:30+00:00| seen| https://t.me/cibsecurity/71595...
CVE-2023-40561
Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...
CVE-2023-40561 Enhanced Ecommerce Google Analytics for WooCommerce
Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...
CVE-2023-40561 Enhanced Ecommerce Google Analytics for WooCommerce
Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...
CVE-2023-40561
CVE-2023-40561 is a CSRF vulnerability in the Dotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin (versions
WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.7.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40561 Patch priority Low CVSS severity Low 5.4 Developer...
CVE-2022-40561
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...