Threats tagged 'ghsa-f8jr-q32f-87q5'

CVE-2026-92751 is a high-severity cross-site request forgery (CSRF) vulnerability in Yahoo CMAK versions up to 3.0.0.6. The software fails to implement a CSRF filter, allowing attackers to perform unauthorized state-changing actions on behalf of authenticated operators. Exploitation involves crafting hidden forms that submit destructive requests, such as topic deletion or cluster configuration changes, leveraging the operator's HTTP Basic authentication credentials or cookies without SameSite protection.