#cwe-352

共收录 796 条相关情报。

漏洞预警2026-05-21 发布INFO

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder. The Concrete CMS security team gave th...

CVE-2026-8415

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/as

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-1275

漏洞预警2026-05-21 发布INFO

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate. The Concrete CMS security team gave this vulnerabi...

CVE-2026-8414

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/dupl

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-1275

漏洞预警2026-05-21 发布INFO

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design. The Concrete CMS security team gave this vulnerab...

CVE-2026-8413

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-1275

漏洞预警2026-05-21 发布INFO

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache. The Concrete CMS security team gave this vulnerab...

CVE-2026-8412

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-1275

漏洞预警2026-05-21 发布INFO

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete. The Concrete CMS security team gave this vulnerab...

CVE-2026-8411

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-1275

漏洞预警2026-05-21 发布INFO

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete. The The Concrete CMS security team gave this vul...

CVE-2026-8410

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-1275

漏洞预警2026-05-21 发布INFO

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete. The The Concrete CMS security team gave this vulnerab...

CVE-2026-8409

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delet

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-1275

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below is vulnerable to unauthorized file deletion due to an Inverted CSRF token check in the DeleteFile controller. The code throws an error when the tok...

CVE-2026-7882

Concrete CMS 9.5.0 and below is vulnerable to unauthorized file deletion due to an Inverted CSRF token check in the Del

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token-...

CVE-2026-8428

Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to ...

CVE-2026-8426

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepa

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to ...

CVE-2026-8417

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_up

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of...

CVE-2026-8421

Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/singl

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high

安全公告2026-05-21 发布INFO

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to ...

CVE-2026-8140

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/install/down

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the corresponding do_update() method in concrete/control...

CVE-2026-8428

Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-829

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepare_remote_upgrade/<remoteMPID>. An attacker who controls ...

CVE-2026-8426

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepa

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-829

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/single_page/dashboard/extend/install.php. An attacker who can...

CVE-2026-8421

Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/singl

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_update/<pkgHandle>. The do_update() method in concrete/cont...

CVE-2026-8417

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_up

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-21 发布INFO

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/install/download/<remoteId>. The download() method in concrete/contro...

CVE-2026-8140

Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/install/down

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-05-21 发布INFO

Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker cont...

CVE-2026-22880

Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO aut

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

安全公告2026-05-20 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM)...

CVE-2026-44925

Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to for

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high