| Название | mtons https://gitee.com/mtons/mblog <=3.5.0 CSRF |
|---|
| Описание | The application has no CSRF protection, allowing attackers to leverage CSRF to launch various attacks against admin users. Particularly when combined with XSS vulnerabilities, this would enable attackers to steal admin and normal users' credentials |
|---|
| Источник | ⚠️ https://gitee.com/mtons/mblog/issues/ICPMGP |
|---|
| Пользователь | ZAST.AI (UID 87884) |
|---|
| Представление | 05.08.2025 09:10 (1 Год назад) |
|---|
| Модерация | 13.08.2025 19:00 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 319988 [mtons mblog до 3.5.0 подделка межсайтовых запросов] |
|---|
| Баллы | 16 |
|---|