Lucene search
+L

2 matches found

Mend
Mend
•added 2020/08/24 3:34 p.m.•9 views

CVE-2020-14043

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Cross Side Request Forgery CSRF vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins...

8.8CVSS0.01549EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/24 12:00 a.m.•11 views

CVE-2020-14043: Cross-Site Request Forgery (CSRF)

PRODUCT NOT SUPPORTED WHEN ASSIGNED A Cross Side Request Forgery CSRF vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/market/controller.php. This might cause admins...

8.8CVSS6.2AI score0.01549EPSS
SaveExploits1References2
Rows per page
Query Builder