CVE-2021-47754 — Arunna 1.0.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a maliciou…
Published: 2026-01-15 · CVSS: 6.9 · CVSS 4.0
Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows attackers to manipulate user profile settings without authentication. Attackers can craft a malicious form to change user details, including passwords, email, and administrative privileges by tricking authenticated users into submitting the form.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7