| 标题 | ZHENFENG13 https://github.com/ZHENFENG13/My-Blog <=1.0.0 CSRF |
|---|
| 描述 | The application has no CSRF protection, allowing attackers to leverage CSRF to launch various attacks against admin users. Particularly when combined with XSS vulnerabilities, this would enable attackers to target both frontend users and admin users. |
|---|
| 来源 | ⚠️ https://github.com/ZHENFENG13/My-Blog/issues/145 |
|---|
| 用户 | ZAST.AI (UID 87884) |
|---|
| 提交 | 2025-07-26 18時26分 (1 年前) |
|---|
| 管理 | 2025-08-08 10時35分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 319235 [zhenfeng13 My-Blog 直到 1.0.0 /admin/tags/save tagName 跨网站请求伪造] |
|---|
| 积分 | 16 |
|---|