CVE-2023-3075
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A Cross-Site Request Forgery (CSRF) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.
Risk Assessment
This vulnerability could lead to unauthorized access to application data or functions, posing a significant security risk to the organization.
Recommendation
It is recommended to upgrade to version 8 or later to mitigate this vulnerability and implement additional protections against CSRF attacks.
Other vulnerabilities in tsolucio/corebos
See all- CVE-2023-3069Critical
An unverified password change exists in the GitHub repository tsolucio/corebos prior to version 8, which may lead to unauthorized access.
- CVE-2023-3073Medium
A Cross-site Scripting (XSS) vulnerability was identified in the GitHub repository tsolucio/corebos prior to version 8 via evvtgendoc.
- CVE-2023-3074Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.
- CVE-2023-3071Medium
A Cross-site Scripting (XSS) vulnerability - Stored in the GitHub repository tsolucio/corebos prior to version 8.
- CVE-2023-3070Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository tsolucio/corebos prior to version 8, allowing malicious code to be stored in the application.
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS