#cwe-352

共收录 791 条相关情报。

← 返回所有主题

漏洞预警2026-10-02 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6.

CVE-2026-39718

Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the admintag action that allows attackers to delete tag associations by luring administrators to craf...

CVE-2026-104453

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the admintag action that allows attackers to

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes page attachments on GET requests without validating a CSR...

CVE-2026-104452

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to restore old page revisions through GET requests lacking CSR...

CVE-2026-104451

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to re

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanently deletes a page on any GET request carrying a jsonp_call...

CVE-2026-104448

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanentl

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-02 发布INFO

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows attackers to delete installed packages via unprotected GET re...

CVE-2026-104447

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows atta

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 CSRF Tag Deletion via admintag Action

CVE-2026-104453

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the admintag action that allows attackers to

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 CSRF Attachment Deletion via filemanager Handler

CVE-2026-104452

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler

CVE-2026-104451

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to re

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler

CVE-2026-104448

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanentl

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352

安全公告2026-10-02 发布INFO

YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction

CVE-2026-104447

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows atta

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352

安全公告2026-10-01 发布INFO

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API...

CVE-2026-104059

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows un

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-352 #severity:high

漏洞预警2026-10-01 发布INFO

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-C...

CVE-2026-56662

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-01 发布INFO

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads...

CVE-2026-56660

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-352 #cwe-434 #cwe-918

漏洞预警2026-10-01 发布INFO

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions...

CVE-2026-104059

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows un

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

安全公告2026-10-01 发布INFO

Lektor 3.3.14 CSRF via Admin API Endpoints

CVE-2026-104059

Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows un

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352

漏洞预警2026-10-01 发布INFO

Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Memberful - Membersh...

CVE-2026-103067

Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Sit

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-01 发布INFO

Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted link may cause th...

CVE-2026-94220

Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacke

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

漏洞预警2026-10-01 发布INFO

Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf...

CVE-2026-103285

Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functio

历史摘要 · 未重新核验 · NVD

#cve #cwe-352

安全公告2026-10-01 发布INFO

Ghost 5.19.0 before 6.57.1 Cross-Site Request Forgery

CVE-2026-103285

Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functio

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-352