cve.bz

CWE-352: Cross-Site Request Forgery (Cross Site Reference Forgery), page 154

Filter

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

What the weakness is: CWE-352 at MITRE

Related attack patterns (CAPEC): 4
  • CAPEC-62 Cross Site Request Forgery Likelihood: High · Severity: Very High
  • CAPEC-111 JSON Hijacking (aka JavaScript Hijacking) Likelihood: High · Severity: High
  • CAPEC-462 Cross-Domain Search Timing Severity: Medium
  • CAPEC-467 Cross Site Identification Severity: Low

The attack patterns MITRE's CAPEC relates to CWE-352, as MITRE names them. Credits.

Ask an AI about CWE-352

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-352: Cross-Site Request Forgery and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/352.html and https://cve.bz/cve/cwe/352?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.7CVE-2019-14680EPSS 0.5%

    The admin-renamer-extended (aka Admin renamer extended) plugin 3.2.1 for WordPress allows wp-admin/plugins.php?page=admin-renamer-extended/admin.php CSRF.

  2. 6.5CVE-2019-14679EPSS 0.7%

    core/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arplite_import_export CSRF.

  3. 8.8CVE-2019-1958EPSS 0.6%

    A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insu…

  4. 4.3CVE-2019-10388EPSS 0.6%

    A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.

  5. 8.8CVE-2019-10386EPSS 0.9%

    A cross-site request forgery vulnerability in Jenkins XL TestView Plugin 1.2.0 and earlier in XLTestView.XLTestDescriptor#doTestConnection allows users with Overall/Read access to connect to an attacker-specified URL using attacker-specifi…

  6. 8.8CVE-2019-10368EPSS 1.1%

    A cross-site request forgery vulnerability in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to…

  7. 6.5CVE-2016-10861EPSS 0.5%

    Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password.

  8. 8.8CVE-2019-14703EPSS 0.7%

    A CSRF issue was discovered in webparam?user&action=set&param=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account.

  9. 8.8CVE-2019-14346ExploitEPSS 2.7%

    Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.

  10. 9.8CVE-2019-14551EPSS 1.1%

    Das Q before 2019-08-02 allows web sites to execute arbitrary code on client machines, as demonstrated by a cross-origin /install request with an attacker-controlled releaseUrl, which triggers download and execution of code within a ZIP ar…

  11. 6.5CVE-2019-7947EPSS 0.4%

    A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3…

  12. 6.5CVE-2019-7874EPSS 0.4%

    A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of user roles.

  13. 4.3CVE-2019-7873EPSS 0.4%

    A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule.

  14. 8.8CVE-2019-7865EPSS 0.5%

    A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration.

  15. 4.3CVE-2019-7857EPSS 0.4%

    A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token impl…

  16. 6.5CVE-2019-7851EPSS 0.4%

    A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.

  17. 5.4CVE-2019-10176EPSS 0.5%

    A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain static during a user's session. An attacker with the ability to observe the valu…

  18. 8.8CVE-2013-7473EPSS 0.6%

    Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account.

  19. 8.8CVE-2018-10899EPSS 2.7%

    A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could resul…

  20. 8.8CVE-2019-10186EPSS 1.1%

    A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool.

  21. 8.8CVE-2019-3959EPSS 0.8%

    Cross-site request forgery in WallacePOS 1.4.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.

  22. 6.5CVE-2018-20872EPSS 0.5%

    DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649.

  23. 6.3CVE-2019-10359EPSS 0.6%

    A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.

  24. 6.5CVE-2019-14327EPSS 0.6%

    A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change the plugin settings.

  25. 8.8CVE-2016-10766EPSS 0.6%

    edx-platform before 2016-06-06 allows CSRF.

  26. 8.8CVE-2019-14328ExploitEPSS 3.1%

    The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.

  27. 6.1CVE-2019-14228EPSS 0.4%

    Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username w…

  28. 8.8CVE-2019-4212EPSS 0.5%

    IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159132.

  29. 8.8CVE-2019-11712EPSS 1.0%

    POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery (CSRF) attacks. This vulnerability affects Firef…

  30. 8.1CVE-2019-14240EPSS 0.8%

    WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URI.

  31. 8.8CVE-2019-12934EPSS 1.3%

    An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?page=wp-code-highlight-js allows CSRF, as demonstrated by an XSS payload in the hljs_additional_css parameter.

  32. 8.8CVE-2018-17792EPSS 1.0%

    MDaemon Webmail (formerly WorldClient) has CSRF.

  33. 8.8CVE-2019-13974EPSS 0.6%

    LayerBB 1.1.3 allows conversations.php/cmd/new CSRF.

  34. 6.5CVE-2019-7953EPSS 2.7%

    Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.

  35. 8.8CVE-2019-13961ExploitEPSS 2.3%

    A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php.

  36. 8.8CVE-2019-1010112EPSS 0.7%

    OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed v…

  37. 8.8CVE-2019-9231EPSS 0.7%

    An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in the management web interface allows remot…

  38. 8.8CVE-2019-13949EPSS 0.7%

    SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change.

  39. 8.8CVE-2019-1010096EPSS 0.7%

    DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin. The component is: admin/users/edit.php?uid=2. The attack vector is: After the ad…

  40. 8.8CVE-2019-1010095EPSS 0.7%

    DomainMOD v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The component is: admin/users/add.php. The attack vector is: After the administrator …

  41. 8.8CVE-2019-1010094EPSS 0.7%

    domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component is: http://127.0.0.1/settings/password/ http://127.0.0.1/admin/users/add.php ht…

  42. 8.8CVE-2019-1010054EPSS 2.2%

    Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable a…

  43. 7.5CVE-2019-10353EPSS 1.5%

    CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection.

  44. 8.8CVE-2019-13611EPSS 0.9%

    An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin h…

  45. 8.8CVE-2019-13594EPSS 0.6%

    In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server.

  46. 8.8CVE-2019-13563EPSS 1.0%

    D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console.

  47. 8.8CVE-2019-12363EPSS 0.6%

    An CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An attacker can forge a request to an installed mybb2fa plugin to control its state via usercp.php?action=mybb2fa&do=deactivate (or usercp.php?action…

  48. 8.8CVE-2019-10340EPSS 1.4%

    A cross-site request forgery vulnerability in Jenkins Docker Plugin 1.1.6 and earlier in DockerAPI.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified cred…

  49. 8.8CVE-2019-12466EPSS 0.8%

    Wikimedia MediaWiki through 1.32.1 allows CSRF.

  50. 8.8CVE-2019-13071EPSS 0.7%

    CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an att…