CVE-2025-29722

🛡️ CVE-2025-29722 – Commercify v1.0 におけるクロスサイトリクエストフォージェリ CSRF 発見者: David P.S Abraham（別名 Davycipher） CVE ID CVE-2025-29722 は、MITRE Corporation によってこの脆弱性に割り当てられました。 概要 CSRF 脆弱性 が、@yassmittal によって開発されたオープンソースの e コマースプラットフォームである Commercify v1.0 で特定されました。このアプリケーションには、/updatesettings などの重要なエンドポイントに適切な...

EUVD-2025-14818

Malicious code in bioql PyPI...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

Commercify 安全漏洞

Commercify is an e-commerce website by the individual developer Yash Mittal. A security vulnerability exists in version 1.0 of Commercify, which stems from a lack of CSRF protection on sensitive endpoints and could lead to cross-site request forgery attacks...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

The open-source e-commerce platform Commercify v1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw (CWE-355). The root cause is a lack of CSRF protection mechanisms, specifically the absence of CSRF tokens , missing SameSite cookie attributes, and a permissive CORS policy (Access-Contr...

PT-2025-17215 · Unknown · Commercify

Name of the Vulnerable Software and Affected Versions: Commercify version 1.0 Description: A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints. Recommendations: For Commercify version 1.0,...

CVE-2025-29722: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...