12 matches found
CVE-2025-29722
🛡️ CVE-2025-29722 – Cross Site Request Forgery CSRF in Commercify v1.0 Discovered by: David P.S Abraham aka Davycipher CVE ID CVE-2025-29722 has been assigned to this vulnerability by MITRE Corporation. Summary A CSRF vulnerability was identified in Commercify v1.0 , an open-source e-commerce...
EUVD-2025-14818
Malicious code in bioql PyPI...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
PT-2025-17215 · Unknown · Commercify
Name of the Vulnerable Software and Affected Versions: Commercify version 1.0 Description: A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints. Recommendations: For Commercify version 1.0,...
CVE-2025-29722: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
Commercify 安全漏洞
Commercify is an e-commerce website by the individual developer Yash Mittal. A security vulnerability exists in version 1.0 of Commercify, which stems from a lack of CSRF protection on sensitive endpoints and could lead to cross-site request forgery attacks...
CVE-2025-29722
The open-source e-commerce platform Commercify v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352) due to missing CSRF protection on sensitive endpoints, such as /update_settings. Attackers can construct malicious requests from other domains to modify user data, potentially ...
