CVE-2023-33409

MediumCVSS 6.5

Published: 05/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

Minical version 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php.

Risk Assessment

A CSRF attack could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially leading to data loss or system integrity breaches.

Recommendation

It is recommended to implement CSRF tokens in forms and validate the source of requests to minimize the risk of attacks.

Original NVD description (English source)

Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php.