Lucene search
MitreCVELIST:CVE-2023-38759HistoryAug 08, 2023 - 12:00 a.m.
CVE-2023-38759
2023-08-0800:00:00
mitre
www.cve.org
cross site request forgery
wger project
workout manager
remote attacker
user-management
gym
templates
core views
components
Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/reset_user_password.html, templates/user/overview.html, core/views/user.py, and templates/user/preferences.html, core/forms.py components.
Related
prion
prion
Cross site request forgery (csrf)
2023-08-08 16:15:00
osv
osv
wger Workout Manager Cross-Site Request Forgery vulnerability
2023-08-08 18:30:35
PYSEC-2023-144
2023-08-08 16:15:00
nvd
nvd
CVE-2023-38759
2023-08-08 16:15:12
cve
cve
CVE-2023-38759
2023-08-08 16:15:12
github
github
wger Workout Manager Cross-Site Request Forgery vulnerability
2023-08-08 18:30:35