CVE-2023-38130

2023-11-1704:37:02

jpcert

www.cve.org

csrf vulnerability

cubecart

remote attacker

data deletion

0.001 Low

EPSS

Percentile

31.3%

JSON

Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the system.

CNA Affected

[
  {
    "vendor": "CubeCart Limited",
    "product": "CubeCart",
    "versions": [
      {
        "version": "prior to 6.5.3",
        "status": "affected"
      }
    ]
  }
]

References

forums.cubecart.com/topic/58736-cubecart-653-released-security-update/

jvn.jp/en/jp/JVN22220399/

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for CVELIST:CVE-2023-38130