CVE-2022-2353 — Cross-Site Request Forgery (CSRF) in microweber/microweber
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-sit…
Published: 2022-07-09 · CVSS: 6.3 · CVSS 3.0
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7