Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-352 (跨站请求伪造(CSRF)) — Vulnerability Class 4751

4751 vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-0554 Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery — Quick Restaurant Menu 8.1 High2023-01-27
CVE-2021-21395 Magneto-lts vulnerable to Cross-Site Request Forgery — magento-lts 4.2 Medium2023-01-27
CVE-2022-43980 Cross-site scripting vulnerability in the network maps edit functionality — Pandora FMS 5.2 Medium2023-01-27
CVE-2023-0438 Cross-Site Request Forgery (CSRF) in modoboa/modoboa — modoboa/modoboa 6.5 -2023-01-23
CVE-2023-0403 Social Warfare <= 4.3.1 - Cross-Site Request Forgery — Social Sharing Plugin – Social Warfare 5.4 Medium2023-01-19
CVE-2023-0398 Cross-Site Request Forgery (CSRF) in modoboa/modoboa — modoboa/modoboa 6.5 -2023-01-19
CVE-2023-0406 Cross-Site Request Forgery (CSRF) in modoboa/modoboa — modoboa/modoboa 6.5 -2023-01-19
CVE-2023-0385 Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery — Custom 404 Pro 4.3 Medium2023-01-18
CVE-2022-47395 CVE-2022-47395 — RTLS Studio 8.1 High2023-01-18
CVE-2022-45127 CVE-2022-45127 — RTLS Studio 8.1 High2023-01-18
CVE-2022-4621 Panasonic Sanyo CCTV Network Camera — Sanyo CCTV Network Camera 7.5 High2023-01-17
CVE-2022-30544 WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF) — OSM – OpenStreetMap 4.3 Medium2023-01-17
CVE-2022-43719 Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API — Apache Superset 8.8 -2023-01-16
CVE-2023-0294 Mediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery — Mediamatic – Media Library Folders 8.8 High2023-01-13
CVE-2022-46367 Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation — FTP server 6.8 Medium2023-01-12
CVE-2022-46368 Rumpus - FTP server Cross-site request forgery (CSRF) – Create user — FTP server 6.8 Medium2023-01-12
CVE-2022-4707 Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation — Royal Addons for Elementor – Addons and Templates Kit for Elementor 4.3 Medium2023-01-10
CVE-2023-22472 Nextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious link — security-advisories 5.3 Medium2023-01-09
CVE-2023-0088 Swifty Page Manager <= 3.0.1 - Cross-Site Request Forgery — Swifty Page Manager 8.8 High2023-01-05
CVE-2023-0086 JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update — JetWidgets For Elementor 5.4 Medium2023-01-05
CVE-2016-15009 OpenACS bug-tracker Search nav-bar.adp cross-site request forgery — bug-tracker 3.5 Low2023-01-05
CVE-2023-22457 org.xwiki.contrib:application-ckeditor-ui vulnerable to Remote Code Execution via Cross-Site Request Forgery — application-ckeditor 9.1 Critical2023-01-04
CVE-2022-42435 IBM Business Automation Workflow cross-site request forgery — Business Automation Workflow 4.3 Medium2023-01-03
CVE-2014-125028 valtech IDP Test Client main.py cross-site request forgery — IDP Test Client 4.3 Medium2022-12-31
CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor — froxlor/froxlor 4.3 -2022-12-31
CVE-2022-4844 Cross-Site Request Forgery (CSRF) in usememos/memos — usememos/memos 6.5 -2022-12-29
CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos — usememos/memos 6.5 -2022-12-29
CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos — usememos/memos 6.5 -2022-12-29
CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos — usememos/memos 6.5 -2022-12-29
CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos — usememos/memos 6.5 -2022-12-29

Vulnerabilities classified as CWE-352 (跨站请求伪造(CSRF)) represent 4751 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.