CVE-2021-46252

CVSS 6.5 MEDIUMEPSS 0.5%

A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers to modify account request requirement bypasses.

CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:R

Productos afectados

n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/InternationalScratchWiki/scratch-confirmaccount-v3/commit/5ed5479de0a279377aa9f64362481efb4e75d8f9 https://github.com/InternationalScratchWiki/scratch-confirmaccount-v3/pull/155