5.4
Moyenne
CVE-2023-27295 Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests
Description
Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenCATS | 0.9.6 | Pas de correctif indiqué |
Autres CVE de OpenCATS
Les 5 CVE de OpenCATS →
CVE-2026-111874
A flaw has been found in OpenCATS 0.10.0
6.3
Moyenne
CVE-2023-27292
An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET…
5.4
Moyenne
CVE-2023-27293
Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious…
6.1
Moyenne
CVE-2023-27294
Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted…
5.4
Moyenne