high8.3
CVE-2024-25808
Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.
Impact
Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lycheeorg | Lychee | Version 3.1.6 |