Back to search
CVE-2023-27295
Published: Feb 28, 2023
Modified: Mar 10, 2025
PUBLISHED
Description
Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited.
| Vendor | Product | Versions |
|---|---|---|
n/a | OpenCATS | affected 0.9.6 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now