Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47750

HistoryJun 26, 2024 - 6:30 a.m.

Cross Site Request Forgery (CSRF)

2024-06-2606:30:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1

cross site request forgery

vulnerable

silverstripe/graphql

csrf protection

authenticated users

get requests

data modification

data deletion

server vulnerability

6.9 Medium

AI Score

Confidence

Low

silverstripe/graphql is vulnerable to Cross Site Request Forgery (CSRF). The vulnerability is due to the lack of CSRF protection, allowing authenticated users to unwittingly trigger GET requests that can modify or delete data on the server.

6.9 Medium

AI Score

Confidence

Low