CWE-352: Cross-Site Request Forgery
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Also known as Session Riding, Cross Site Reference Forgery, XSRF.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- nexcess givewpWordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- zarinpal gatewayWordPress Zarinpal Gateway plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- quantumcloud simple link directory proWordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- apustheme apuslistingWordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability8.8 High
- ninja forms file uploads extensionWordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forgery (CSRF) vulnerability9.6 Critical
- alex volkov wp accessibility helper (wah)WordPress WP Accessibility Helper (WAH) plugin <= 0.6.6 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- regularlabs.com cache cleaner extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension5.4 Medium
- regularlabs.com modules anywhere extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension8.1 High
- regularlabs.com geoip extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension8.8 High
- regularlabs.com advanced module manager extension for joomla, articles anywhere extension for joomla, articles field extension for joomla +20 more +22 moreJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints8.0 High
- regularlabs.com advanced module manager extension for joomla, conditional content extension for joomla, content templater pro extension for joomla +1 more +3 moreJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager8.8 High
- regularlabs.com regular labs extension manager extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager8.8 High
- regularlabs.com content templater extension for joomla, rereplacer extension for joomla, snippets extension for joomla +2 moreJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension8.8 High
- oracle work in processVulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component:...5.4 Medium
- oracle e-business suite, oracle corporation contracts integration +1 moreVulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:...6.1 Medium
- oracle e-business suite, oracle corporation contracts integration +1 moreVulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:...7.1 High
- oracle corporation hrms (japanese), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (Japanese) product of Oracle E-Business Suite (component: Oracle...5.4 Medium
- oracle security serviceVulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component:...6.4 Medium
- oracle peoplesoft enterprise fin program managementVulnerability in the PeopleSoft Enterprise FIN Program Management product of Oracle PeopleSoft ...9.0 Critical
- oracle commerce platformVulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo...7.6 High
- oracle e-business suite, oracle corporation mes for process manufacturing +1 moreVulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite ...8.2 High
- oracle banking trade finance process managementVulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial...9.6 Critical
- oracle corporation mysql connectors, oracle mysql connector\/j +1 moreVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). ...6.5 Medium
- oracle flow manufacturingVulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component:...5.4 Medium
- oracle e-business suite, oracle corporation transportation execution +1 moreVulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite ...5.4 Medium
- oracle property managerVulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component:...5.4 Medium
- oracle work in processVulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component:...7.6 High
- oracle knowledge managementVulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component:...6.1 Medium
- oracle e-business suite, oracle corporation isupport +1 moreVulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal...6.1 Medium
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.5 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.6 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.3 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...9.3 Critical
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...3.5 Low
- thiagopena djangosigedjangoSIGE 1.10 CSRF via GET-based Order Cancellation Views5.3 Medium
- withastro astroAstro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered5.1 Medium
- revive adserverA CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking...5.4 Medium
- datacycle-engine datacycle-coredataCycle State-Changing GET Endpoints Enable CSRF4.3 Medium
- Show moreLoading…