CVE-2022-3585

CWE-863 — Incorrect AuthorizationCWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 63.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Simple Cold Storage Management SystemOretnom23 Simple Cold Storage Management System
Timeline
PublishedOct 18

Description

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgery↗2022-10-18
▶
GHSA
GHSA-r6p2-4r7p-7g2c: A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1↗2022-10-18
▶
CVE-2022-3585 (MEDIUM CVSS 4.3) | A vulnerability classified as probl | cvebase.io