CVE-2023-4865

A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239350 is the identifier assigned to this vulnerability.
References
Link Resource
https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/ Exploit Third Party Advisory
https://vuldb.com/?ctiid.239350 Permissions Required Third Party Advisory
https://vuldb.com/?id.239350 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:take-note_app_project:take-note_app:1.0:*:*:*:*:wordpress:*:*

History

13 Sep 2023, 14:08

Type Values Removed Values Added
CPE cpe:2.3:a:take-note_app_project:take-note_app:1.0:*:*:*:*:wordpress:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
First Time Take-note App Project take-note App
Take-note App Project
References (MISC) https://vuldb.com/?id.239350 - (MISC) https://vuldb.com/?id.239350 - Third Party Advisory
References (MISC) https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/ - (MISC) https://skypoc.wordpress.com/2023/09/05/sourcecodester-take-note-app-v1-0-has-multiple-vulnerabilities/ - Exploit, Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.239350 - (MISC) https://vuldb.com/?ctiid.239350 - Permissions Required, Third Party Advisory

09 Sep 2023, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-09 23:15

Updated : 2024-04-11 01:22


NVD link : CVE-2023-4865

Mitre link : CVE-2023-4865

CVE.ORG link : CVE-2023-4865


JSON object : View

Products Affected

take-note_app_project

  • take-note_app
CWE
CWE-352

Cross-Site Request Forgery (CSRF)