Description (CNA)
A vulnerability was detected in technical-laohu mpay up to 1.2.4. This affects an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| technical-laohu / mpay | affected 1.2.0; affected 1.2.1; affected 1.2.2; affected 1.2.3; affected 1.2.4 |
CWE
CWE-352, CWE-862
References
- https://vuldb.com/?id.341746
- https://vuldb.com/?ctiid.341746
- https://vuldb.com/?submit.735789
- https://github.com/bdkuzma/vuln/issues/18
ADP enrichment
No English description supplied.
No references supplied.