Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6904
HistoryJul 03, 2018 - 4:26 a.m.

Cross-Site Request Forgery (CSRF)

2018-07-0304:26:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2

0.001 Low

EPSS

Percentile

45.0%

Opencart is vulnerable to cross-site request forgery (CSRF) attack. The library does not validate the user token during a password update, allowing a malicious user to change the password via a cross-site request forgery attack.

CPENameOperatorVersion
opencart/opencartle3.1.0.0_a1

0.001 Low

EPSS

Percentile

45.0%

Related for VERACODE:6904