| عنوان | ZHENFENG13 https://github.com/ZHENFENG13/My-Blog <=1.0.0 CSRF |
|---|
| الوصف | The application has no CSRF protection, allowing attackers to leverage CSRF to launch various attacks against admin users. Particularly when combined with XSS vulnerabilities, this would enable attackers to target both frontend users and admin users. |
|---|
| المصدر | ⚠️ https://github.com/ZHENFENG13/My-Blog/issues/145 |
|---|
| المستخدم | ZAST.AI (UID 87884) |
|---|
| ارسال | 26/07/2025 06:26 PM (9 أشهر منذ) |
|---|
| الاعتدال | 08/08/2025 10:35 AM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 319235 [zhenfeng13 My-Blog حتى 1.0.0 /admin/tags/save tagName تزوير طلبات عبر المواقع] |
|---|
| النقاط | 16 |
|---|