CVE-2026-15034
MediumCVSS 4.3Summary
A cross-site request forgery (CSRF) vulnerability has been found in Flask-MonitoringDashboard up to version 5.0.2. An unknown functionality allows remote exploitation. The exploit is publicly disclosed and the project has not responded to the issue report.
Risk Assessment
CSRF attack could enable unauthorized actions in the context of an administrator session, potentially leading to monitoring configuration changes or data theft.
Recommendation
Immediately update Flask-MonitoringDashboard to the latest available version or apply temporary mitigations such as CSRF token validation and Origin header checks.
Original NVD description (English source)
A vulnerability has been found in flask-dashboard Flask-MonitoringDashboard up to 5.0.2. Affected by this issue is some unknown functionality. Such manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.