Threats tagged 'ghsa-7r9r-jrf7-j7wh'

A cross-site request forgery (CSRF) vulnerability exists in the sfturing hosp_order project affecting an unknown function in CommonUserController.java. The vulnerability allows remote attackers to manipulate requests, potentially causing unintended actions. The project does not use versioning, so specific affected versions are unknown. The issue was reported early but has not yet received a response or fix from the project maintainers. The vulnerability has a low severity rating with a CVSS score of 4.3.