Threats tagged 'ghsa-qx28-m2wr-99m4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-116895REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode Medium5.12026-10-27GCVE DatabaseCVE-2026-116895 REDAXO versions before 5.21.5 have a cross-site request forgery (CSRF) vulnerability in the backend. The vulnerability arises because the safemode GET parameter in index.php is processed without validating a CSRF token. An attacker can exploit this by tricking a logged-in administrator into clicking a crafted link, which can disable global safe mode or enable session safe mode, potentially impacting backend addon functionality. Report on CVE-2026-116895 Vulnerability CWE-352 #ghsa-qx28-m2wr-99m4	GCVE Database	2026-10-27

Page 1 of 1