Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47159

HistoryMay 24, 2024 - 6:23 a.m.

Cross-Site Request Forgery (CSRF)

2024-05-2406:23:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2

cross-site request forgery

csrf protection

unauthorized actions

ezplatform

software vulnerability

7.1 High

AI Score

Confidence

High

ezsystems/ezplatform is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability is due to the CSRF protection which is not enabled by default., which allows attackers to perform unauthorized actions by exploiting the inactive CSRF token.

7.1 High

AI Score

Confidence

High