Threats tagged 'ghsa-v768-hp7c-4rf7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-121451AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated High8.72026-11-03GCVE DatabaseCVE-2026-121451 AB Download Manager versions before 1.11.2 have a cross-site request forgery (CSRF) vulnerability in an unauthenticated browser-integration API. This flaw allows remote attackers to write arbitrary files to specified paths by sending crafted requests to the /start-headless-download endpoint. Exploitation can lead to placing malicious payloads in startup folders, enabling code execution upon the next user login. Report on CVE-2026-121451 Vulnerability CWE-352 #ghsa-v768-hp7c-4rf7	GCVE Database	2026-11-03

Page 1 of 1