| Titolo | code-projects Laundry System 1.0 Cross-Site Request Forgery |
|---|
| Descrizione | During security assessment of "Laundry System", a CSRF vulnerability was discovered in all functionalities that modify the system status and user data. The system lacks CSRF protection mechanisms, enabling attackers to forge malicious requests that execute privileged actions via authenticated victims' browsers. Immediate implementation of anti-CSRF measures is required to prevent unauthorized operations. |
|---|
| Fonte | ⚠️ https://github.com/tuooo/CVE/issues/7 |
|---|
| Utente | DS_Leo (UID 86084) |
|---|
| Sottomissione | 05/06/2025 19:07 (1 Anno fa) |
|---|
| Moderazione | 06/06/2025 00:05 (5 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 311308 [code-projects Laundry System 1.0 cross site request forgery] |
|---|
| Punti | 19 |
|---|