CVE-2023-45670

CVE-2023-45670 : Frigate before 0.13.0 Beta 3 exposes a CSRF vulnerability in the config/save and config/set endpoints, allowing an attacker to trigger arbitrary configuration updates on a Frigate server via a crafted link. Exploitation requires the attacker to know specific server details and pe...

CVE-2023-45670 Frigate cross-site request forgery in `config_save` and `config_set` request handlers

Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the config/save and config/set endpoints of Frigate do not implement any CSRF protection. This makes it possible for a request sourced from another site to update the configuration of the Frigate server e.g. via...