CVE-2026-107831 — Jivejdon through 5.0 CSRF via GET-based Account and Thread Actions
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing actions by abusing GET endpoints lacking anti-CSR…
Published: 2026-10-08 · CVSS: 5.3 · CVSS 4.0
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing actions by abusing GET endpoints lacking anti-CSRF tokens. Attackers can lure authenticated users to crafted links targeting /account/protected/delAll, /account/protected/sub/delSub, or /message/updateAction to delete private messages and subscriptions or rename threads.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7