Lucene search
HistoryJan 30, 2024 - 1:15 a.m.
CVE-2023-51813
cve-2023-51813
cross site request forgery
inventory system v1.0
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
29.9%
Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the staff_list parameter in the index.php component.
Affected configurations
Node
free_and_open_source_inventory_management_system_projectfree_and_open_source_inventory_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| free_and_open_source_inventory_management_system_project | free_and_open_source_inventory_management_system | 1.0 | cpe:2.3:a:free_and_open_source_inventory_management_system_project:free_and_open_source_inventory_management_system:1.0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-51813
2024-01-30 00:00:00
cve
cve
CVE-2023-51813
2024-01-30 01:15:58
prion
prion
Cross site request forgery (csrf)
2024-01-30 01:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
29.9%
Related for NVD:CVE-2023-51813