Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20698
HistoryJul 08, 2019 - 11:07 a.m.

Cross-Site Request Forgery (CSRF)

2019-07-0811:07:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.003 Low

EPSS

Percentile

71.1%

flarum/core is vulnerable to cross-site request forgery (CSRF). The application was not able to determine the authenticity and origin of requests received due to a lack of anti-CSRF tokens. This allows remote attackers to submit unwanted requests on behalf of users when the users are tricked into visiting a malicious web page.

CPENameOperatorVersion
flarum/corele0.1.0-beta.8.2

0.003 Low

EPSS

Percentile

71.1%

Related for VERACODE:20698