Lucene search
K

10 matches found

OSV
OSV
added 2026/01/15 4:16 p.m.2 views

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.5CVSS5.7AI score0.00028EPSS
Exploits1References3
NVD
NVD
added 2026/01/15 4:16 p.m.2 views

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS0.00028EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/15 3:52 p.m.1 views

CVE-2021-47754 Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS6.3AI score0.00028EPSS
Exploits1References3
CVE
CVE
added 2026/01/15 3:52 p.m.8 views

CVE-2021-47754

Arunna 1.0.0 is affected by a cross-site request forgery (CSRF) vulnerability (CVE-2021-47754). The issue allows an attacker to manipulate user profile settings without authentication by tricking an authenticated user into submitting a malicious form, enabling changes to user details such as pass...

6.9CVSS6.3AI score0.00028EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/15 3:52 p.m.2 views

CVE-2021-47754

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS5.3AI score0.00028EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.3 views

Arunna security vulnerabilities

Arunna is a social media framework developed by Arunna’s individual developer. Version 1.0.0 of Arunna contains security vulnerabilities; these vulnerabilities stem from the lack of authentication, which may lead to cross-site request forgery attacks, thereby manipulating user profile settings...

6.9CVSS5.7AI score0.00028EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.3 views

PT-2026-3031

Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users...

6.9CVSS6.7AI score0.00028EPSS
Exploits1References4
0day.today
0day.today
added 2021/12/16 12:0 a.m.176 views

Arunna 1.0.0 - (Multiple) Cross-Site Request Forgery Vulnerability

Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery CSRF Exploit Author: =LL= Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/ Vendor Homepage: https://github.com/arunna Software Link:...

1.1AI score
Exploits0
Packet Storm
Packet Storm
added 2021/12/16 12:0 a.m.293 views

Arunna 1.0.0 Cross Site Request Forgery

Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery CSRF Date: November 29, 2021 Exploit Author: =LL= Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/ Vendor Homepage: https://github.com/arunna Software Link:...

1AI score
Exploits0
Exploit DB
Exploit DB
added 2021/12/16 12:0 a.m.424 views

Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)

Exploit Title: Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery CSRF Date: November 29, 2021 Exploit Author: =LL= Detailed Bug Description: https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/ Vendor Homepage: https://github.com/arunna Software Link:...

7.4AI score
Exploits0
Rows per page
Query Builder