CVE-2023-5498 Cross-Site Request Forgery (CSRF) in chiefonboarding/chiefonboarding

2023-10-1009:08:52

CWE-352

@huntrdev

www.cve.org

cross-site request forgery

github repository

chiefonboarding

v2.0.47

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

21.7%

JSON

Cross-Site Request Forgery (CSRF) in GitHub repository chiefonboarding/chiefonboarding prior to v2.0.47.

CNA Affected

[
  {
    "vendor": "chiefonboarding",
    "product": "chiefonboarding/chiefonboarding",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "v2.0.47",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]