cve.bz

CWE-352: Cross-Site Request Forgery (Cross Site Reference Forgery), page 132

Filter

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

What the weakness is: CWE-352 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 4
  • CAPEC-62 Cross Site Request Forgery Likelihood: High · Severity: Very High
  • CAPEC-111 JSON Hijacking (aka JavaScript Hijacking) Likelihood: High · Severity: High
  • CAPEC-462 Cross-Domain Search Timing Severity: Medium
  • CAPEC-467 Cross Site Identification Severity: Low

The attack patterns MITRE's CAPEC relates to CWE-352, as MITRE names them. Credits.

Ask an AI about CWE-352

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-352: Cross-Site Request Forgery and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/352.html and https://cve.bz/cve/cwe/352?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.3CVE-2021-4005EPSS 0.4%

    firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

  2. 8.8CVE-2021-29756EPSS 0.6%

    IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM…

  3. 9.6CVE-2015-20105EPSS 1.0%

    The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are ou…

  4. 6.8CVE-2021-3944EPSS 0.6%

    bookstack is vulnerable to Cross-Site Request Forgery (CSRF)

  5. 8.8CVE-2021-44227EPSS 0.8%

    In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.

  6. 8.8CVE-2021-43137EPSS 0.5%

    Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover.

  7. 8.8CVE-2021-4017EPSS 0.6%

    showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  8. 4.3CVE-2021-4015EPSS 0.4%

    firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

  9. 6.5CVE-2021-3993EPSS 0.5%

    showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  10. 8.8CVE-2021-20860EPSS 0.6%

    Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533G…

  11. 8.8CVE-2021-20851EPSS 0.8%

    Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors.

  12. 8.8CVE-2021-42364EPSS 0.6%

    The Stetic WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the stats_page function found in the ~/stetic.php file, which made it possible for attackers to inject arbitrary web scripts in ver…

  13. 8.8CVE-2021-42358EPSS 0.6%

    The Contact Form With Captcha WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the ~/cfwc-form.php file during contact form submission, which made it possible for attackers to inject arbitrary…

  14. 5.4CVE-2021-24822EPSS 0.3%

    The Stylish Cost Calculator WordPress plugin before 7.0.4 does not have any authorisation and CSRF checks on some of its AJAX actions (available to authenticated users), which could allow any authenticated users, such as subscriber to call…

  15. 4.3CVE-2021-24749EPSS 0.4%

    The URL Shortify WordPress plugin before 1.5.1 does not have CSRF check in place when bulk-deleting links or groups, which could allow attackers to make a logged in admin delete arbitrary link and group via a CSRF attack.

  16. 6.1CVE-2021-43777EPSS 0.3%

    Redash is a package for data visualization and sharing. In Redash version 10.0 and prior, the implementation of Google Login (via OAuth) incorrectly uses the `state` parameter to pass the next URL to redirect the user to after login. The `…

  17. 8.8CVE-2021-20846EPSS 0.7%

    Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially…

  18. 8.8CVE-2021-20845EPSS 0.5%

    Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote attacker to hijack the authentication of an administrator and conduct arbitrary operation via a specially crafted web pag…

  19. 6.5CVE-2021-20842EPSS 0.6%

    Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack the authentication of Administrator and delete Administrator via a specially crafted web page.

  20. 5.7CVE-2021-24703EPSS 0.4%

    The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed.

  21. 4.3CVE-2021-24668EPSS 0.4%

    The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack

  22. 8.1CVE-2021-24641EPSS 0.5%

    The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion

  23. 8.8CVE-2021-43559EPSS 0.6%

    A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" functionality did not include the necessary token check to prevent a CSRF risk.

  24. 8.8CVE-2021-34358EPSS 0.4%

    We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later

  25. 5.4CVE-2021-39198EPSS 0.3%

    OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery (CSRF) attack. Th…

  26. 8.8CVE-2021-44036EPSS 0.4%

    Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import.

  27. 8.8CVE-2021-39353EPSS 0.7%

    The Easy Registration Forms WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the ajax_add_form function found in the ~/includes/class-form.php file which made it possible for attackers to inj…

  28. 4.3CVE-2021-3963EPSS 0.4%

    kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  29. 4.3CVE-2021-3957EPSS 0.4%

    kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  30. 6.5CVE-2021-3976EPSS 0.4%

    kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

  31. 8.8CVE-2021-36908EPSS 0.7%

    Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd. WP Reset PRO plugin <= 5.98 versions.

  32. 8.8CVE-2021-41275EPSS 0.6%

    spree_auth_devise is an open source library which provides authentication and authorization services for use with the Spree storefront framework by using an underlying Devise authentication framework. In affected versions spree_auth_devise…

  33. 8.8CVE-2021-41274EPSS 0.7%

    solidus_auth_devise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidus_auth_devise is subject to a CSRF vulnerability that allows user account takeover. All applications …

  34. 4.3CVE-2021-41273EPSS 0.4%

    Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. Due to improperly configured CSRF protections on two routes, a malicious user could execute a CSRF-based attack against the following endpoints: Se…

  35. 4.3CVE-2021-24853EPSS 0.4%

    The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the red…

  36. 6.5CVE-2021-24852EPSS 0.5%

    The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack

  37. 8.8CVE-2021-24804EPSS 0.6%

    The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them. Settings such as HMAC verification secret, account registering and default u…

  38. 6.5CVE-2021-24802EPSS 0.5%

    The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack

  39. 4.3CVE-2021-24776EPSS 0.4%

    The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

  40. 8.8CVE-2021-25965EPSS 0.5%

    In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credenti…

  41. 8.1CVE-2021-25976EPSS 0.5%

    In PiranhaCMS, versions 4.0.0-alpha1 to 9.2.0 are vulnerable to cross-site request forgery (CSRF) when performing various actions supported by the management system, such as deleting a user, deleting a role, editing a post, deleting a medi…

  42. 5.4CVE-2021-3776EPSS 0.4%

    showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  43. 5.4CVE-2021-3775EPSS 0.4%

    showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  44. 6.5CVE-2021-3683EPSS 0.4%

    showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  45. 4.3CVE-2021-3932EPSS 0.4%

    twill is vulnerable to Cross-Site Request Forgery (CSRF)

  46. 4.3CVE-2021-3931EPSS 0.4%

    snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

  47. 4.3CVE-2021-3921EPSS 0.4%

    firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

  48. 8.8CVE-2020-21141EPSS 0.6%

    iCMS v7.0.15 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admincp.php?app=members&do=add.

  49. 6.5CVE-2020-28137EPSS 0.6%

    Cross site request forgery (CSRF) in Genexis Platinum 4410 V2-1.28, allows attackers to cause a denial of service by continuously restarting the router.

  50. 8.8CVE-2021-41426EPSS 0.7%

    Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.