| عنوان | code-projects Traffic Offense Reporting System 1.0 Cross-Site Request Forgery |
|---|
| الوصف | During security assessment of "Traffic Offense Reporting System", a CSRF vulnerability was discovered in all functionalities that modify the system status and user data. The system lacks CSRF protection mechanisms, enabling attackers to forge malicious requests that execute privileged actions via authenticated victims' browsers. Immediate implementation of anti-CSRF measures is required to prevent unauthorized operations. |
|---|
| المصدر | ⚠️ https://github.com/tuooo/CVE/issues/3 |
|---|
| المستخدم | DS_Leo (UID 86084) |
|---|
| ارسال | 05/06/2025 08:28 AM (1 سنة منذ) |
|---|
| الاعتدال | 05/06/2025 05:02 PM (9 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 311259 [code-projects Traffic Offense Reporting System 1.0 تزوير طلبات عبر المواقع] |
|---|
| النقاط | 19 |
|---|