5.4
Medium
CVE-2023-27295 Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests
Description
Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenCATS | 0.9.6 | No fix stated |
Other CVEs of OpenCATS
The 5 CVEs of OpenCATS →
CVE-2026-111874
A flaw has been found in OpenCATS 0.10.0
6.3
Medium
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET…
5.4
Medium
CVE-2023-27293
Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious…
6.1
Medium
CVE-2023-27294
Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted…
5.4
Medium