medium4.3
CVE-2023-52060
A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request.
Impact
A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gestsup | Gestsup | before 3.2.46 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.46&type=patch
- https://github.com/Tanguy-Boisset/CVE/blob/master/CVE-2023-52060/README.md
- https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.46&type=patch
- https://github.com/Tanguy-Boisset/CVE/blob/master/CVE-2023-52060/README.md