| タイトル | code-projects Traffic Offense Reporting System 1.0 Cross-Site Request Forgery |
|---|
| 説明 | During security assessment of "Traffic Offense Reporting System", a CSRF vulnerability was discovered in all functionalities that modify the system status and user data. The system lacks CSRF protection mechanisms, enabling attackers to forge malicious requests that execute privileged actions via authenticated victims' browsers. Immediate implementation of anti-CSRF measures is required to prevent unauthorized operations. |
|---|
| ソース | ⚠️ https://github.com/tuooo/CVE/issues/3 |
|---|
| ユーザー | DS_Leo (UID 86084) |
|---|
| 送信 | 2025年06月05日 08:28 (1 年 ago) |
|---|
| モデレーション | 2025年06月05日 17:02 (9 hours later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 311259 [code-projects Traffic Offense Reporting System 1.0 クロスサイトリクエストフォージェリ] |
|---|
| ポイント | 19 |
|---|