EDB-51961
PoCCasdoor < v1.331.0 - '/api/set-password' CSRF
view exploit source exploit_dbtype webappsauthor Van Lam Nguyenpublished 2024-04-02catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-34927US | medium6.5 | Exploit | ||
Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily chang… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan