CVE Catalog

CVE-2023-3075

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.32%

23th percentile - higher than 23% of all known CVEs

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

Risk Assessment

This vulnerability could lead to unauthorized access to application data or functions, posing a significant security risk to the organization.

Recommendation

It is recommended to upgrade to version 8 or later to mitigate this vulnerability and implement additional protections against CSRF attacks.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS