Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

CVEs (9,945)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-12427 1Westerndigital 1Wd Discovery Jun 17, 2026 May 13, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.
CVE-2020-11060 1Glpi Project 1Glpi Jun 17, 2026 May 12, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid account by using a CSRF. Due to the dif...Show more In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid account by using a CSRF. Due to the difficulty of the exploitation, the attack is only conceivable by an account having Maintenance privileges and the right to add WIFI networks. This is fixed in version 9.4.6.Show less
CVE-2020-5745 1Tecnick 1Tcexam Jun 17, 2026 May 7, 2020 N/A· v4 7.4 HIGH· v3 4.3 MEDIUM· v2 Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
CVE-2020-2186 1Jenkins 1Amazon Ec2 Jun 17, 2026 May 6, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.
CVE-2020-2184 1Jenkins 1Current Versions Systems Jun 17, 2026 May 6, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to connect to an attacker-specified URL.
CVE-2020-8830 1Commscope 1Ruckus Zoneflex R500 Firmware Jun 17, 2026 May 5, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.
CVE-2020-8829 1Intelbras 1Cip 92200 Firmware Jun 17, 2026 May 5, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis.
CVE-2020-7983 1Commscope 1Ruckus Zoneflex R500 Firmware Jun 17, 2026 May 5, 2020 N/A· v4 8.1 HIGH· v3 5.8 MEDIUM· v2 A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.
CVE-2020-5517 1Blueonyx 15209r Firmware Jun 17, 2026 May 5, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 CSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform scraping or other analysis.
CVE-2019-19517 1Intelbras 1Action Rf 1200 Firmware Jun 17, 2026 May 5, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process.
CVE-2020-5335 1Rsa 1Archer Jun 17, 2026 May 4, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to...Show more RSA Archer, versions prior to 6.7 P2 (6.7.0.2), contain a cross-site request forgery vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to send arbitrary requests to the vulnerable application to perform server operations with the privileges of the authenticated victim user.Show less
CVE-2020-12626 2Debian Roundcube 2Debian Linux Webmail Jun 17, 2026 May 4, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.
CVE-2019-0235 1Apache 1Ofbiz Jun 17, 2026 Apr 30, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.
CVE-2020-12462 1Ninjaforms 1Ninja Forms Jun 17, 2026 Apr 29, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS.
CVE-2017-18861 1Netgear 1Readynas Surveillance Nov 21, 2024 Apr 28, 2020 N/A· v4 8.0 HIGH· v3 7.9 HIGH· v2 Certain NETGEAR devices are affected by CSRF. This affects ReadyNAS Surveillance 1.4.3-15-x86 and earlier and ReadyNAS Surveillance 1.1.4-5-ARM and earlier.
CVE-2016-11055 1Netgear 13Cm400 Firmware Cm600 FirmwareD1500 Firmware+10 more Nov 21, 2024 Apr 28, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR20...Show more Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11.Show less
CVE-2018-21096 1Netgear 11Wac120 Firmware Wac505 FirmwareWac510 Firmware+8 more Nov 21, 2024 Apr 27, 2020 N/A· v4 7.4 HIGH· v3 4.9 MEDIUM· v2 Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before...Show more Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.Show less
CVE-2019-4750 1Ibm 1Cloud App Management Jun 17, 2026 Apr 24, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM...Show more IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 173310.Show less
CVE-2017-18703 1Netgear 28D1500 Firmware D500 FirmwareD6100 Firmware+25 more Nov 21, 2024 Apr 24, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1...Show more Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.18, R6020 before 1.0.0.26, R6050 before 1.0.1.16, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6220 before 1.1.0.60, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.40, WNDR3700v5 before 1.1.0.48, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.46, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.Show less
CVE-2017-18708 1Netgear 2R8300 Firmware R8500 Firmware Nov 21, 2024 Apr 24, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.

Previous 1...361362363...498 Next