Lucene search
HistoryMar 14, 2023 - 3:15 p.m.
CVE-2023-27073
cross-site request forgery
attack
change user details
crafted post request
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
21.0%
A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request.
Affected configurations
Node
online_food_ordering_system_projectonline_food_ordering_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| online_food_ordering_system_project | online_food_ordering_system | 1.0 | cpe:2.3:a:online_food_ordering_system_project:online_food_ordering_system:1.0:*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2023-03-14 15:15:00
cvelist
cvelist
CVE-2023-27073
2023-03-14 00:00:00
cve
cve
CVE-2023-27073
2023-03-14 15:15:12
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
21.0%
Related for NVD:CVE-2023-27073