CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 5:3 a.m.•9 views

CVE-2023-36237

Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script...

8.8CVSS7.4AI score0.00393EPSS

Exploits1References1

NVD•added 2024/02/26 10:15 p.m.•17 views

CVE-2023-36237

Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script...

8.8CVSS7.1AI score0.00393EPSS

Exploits1References1

CVE•added 2024/02/26 12:0 a.m.•3394 views

CVE-2023-36237

CVE-2023-36237 affects Bagisto prior to v1.5.1. The CSRF vulnerability allows an attacker to execute arbitrary code via a crafted HTML script, with root cause tied to insufficient request validation (e.g., REST-route validation in reported sources). The impact is described as arbitrary code execu...

8.8CVSS7.3AI score0.00393EPSS

Exploits1References1Affected Software1