CVE-2025-29722

🛡️ CVE-2025-29722 – 사이트 간 요청 위조CSRF in Commercify v1.0 발견자: David P.S Abraham 일명 Davycipher CVE ID CVE-2025-29722 가 MITRE Corporation에 의해 이 취약점에 할당되었습니다. 요약 @yassmittal이 개발한 오픈소스 전자상거래 플랫폼 Commercify v1.0 에서 CSRF 취약점 이 확인되었습니다. 이 애플리케이션은 /updatesettings와 같은 중요 엔드포인트에 적절한 CSRF 보호 메커니즘이 부재하여, 공격자가 다...

EUVD-2025-14818

Malicious code in bioql PyPI...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

Commercify 安全漏洞

Commercify is an e-commerce website by the individual developer Yash Mittal. A security vulnerability exists in version 1.0 of Commercify, which stems from a lack of CSRF protection on sensitive endpoints and could lead to cross-site request forgery attacks...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

CVE-2025-29722 is a CSRF vulnerability in Commercify v1.0 due to missing CSRF protection on sensitive endpoints. The root cause is lack of CSRF tokens with permissive cookies/CORS, enabling attackers to perform unauthorized actions on behalf of authenticated users (example: settings changes via e...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

PT-2025-17215 · Unknown · Commercify

Name of the Vulnerable Software and Affected Versions: Commercify version 1.0 Description: A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints. Recommendations: For Commercify version 1.0,...