| शीर्षक | webkul qloapps 1.6.1 Cross-Site Request Forgery |
|---|
| विवरण | The QloApps application is vulnerable to a Cross-Site Request Forgery (CSRF) attack via the logout functionality. By submitting a specially crafted URL, an attacker can force a user to log out without their knowledge or consent. This can be triggered by visiting a malicious webpage, causing the user to be immediately logged out.
This vulnerability exposes users to potential Denial of Service (DoS), admin disruption, and manipulation of login sessions, especially for authenticated users or administrators. |
|---|
| स्रोत | ⚠️ https://github.com/mano257200/qloapps-csrf-logout-vulnerability |
|---|
| उपयोगकर्ता | Mahendravarman (UID 80955) |
|---|
| सबमिशन | 29/01/2025 08:47 PM (2 साल पहले) |
|---|
| संयम | 06/02/2025 07:59 AM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 294834 [Webkul QloApps 1.6.1 URL /en/?mylogout क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 20 |
|---|