Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://huntr.com/bounties/33f95510-cdee-460e-8e61-107874962f2d | patch third party advisory exploit |
https://github.com/mosparo/mosparo/commit/fb3ac528b7548beb802182310967968a21c1354a | patch |