CVE-2022-3585
SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgery
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assigned to this vulnerability.
| CWE | CWE-863 |
| Vendor | sourcecodester |
| Product | simple cold storage management system |
| Published | Oct 18, 2022 |
| Last Updated | Aug 3, 2024 |
Stay Ahead of the Next One
Get instant alerts for sourcecodester simple cold storage management system
Be the first to know when new medium vulnerabilities affecting sourcecodester simple cold storage management system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
SourceCodester / Simple Cold Storage Management System
1.0