Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33298
HistoryDec 13, 2021 - 10:21 a.m.

Cross-Site Request Forgery (CSRF)

2021-12-1310:21:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.001

Percentile

31.4%

yetiforce/yetiforce-crm is vulnerable to cross-site request forgery. The vulnerability exists in PasswordModalFooter.tpl, allowing a malicious attacker to log out a user as if the authenticated user visits the attacker’s website.

EPSS

0.001

Percentile

31.4%