CVE-2023-34373 Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Project Manager plugin <= 3.3.93 versions

Description

Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Project Manager plugin <= 3.3.93 versions.

Affected products and versions

Product	Affected versions	Fixed in
Zephyr Project Manager 3.3	earliest → 3.3.93	No fix stated

Other CVEs of Zephyr Project Manager

The 10 CVEs of Zephyr Project Manager →

CVE-2025-54714 Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting… 7.1 High CVE-2025-32526 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan James Zephyr… 7.1 High CVE-2025-39552 Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting… 5.4 Medium CVE-2024-43915 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James… 5.5 Medium