CVE-2024-25808

Cross-site Request Forgery CSRF vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function...

CVE-2024-25808

Lychee 3.1.6 is affected by a Cross-site Request Forgery (CSRF) vulnerability that enables remote attackers to execute arbitrary code via the create new album function. The issue is documented across multiple sources (e.g., NVD/Red Hat/CVE records and PT Security), all referencing Lychee 3.1.6 as...