Threats tagged 'ghsa-wjh9-7v88-c76j'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2025-60645xxl-api · Cross-Site Request Forgery (CSRF) Medium6.52025-11-12GCVE DatabaseCVE-2025-60645 A Cross-Site Request Forgery (CSRF) vulnerability in xxl-api version 1.3.0 allows attackers to add users to the management module by sending a crafted GET request. This vulnerability does not affect confidentiality or availability but impacts integrity by enabling unauthorized user additions. Report on CVE-2025-60645 Vulnerability CWE-352 #ghsa-wjh9-7v88-c76j	GCVE Database	2025-11-12

Page 1 of 1