https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:41:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-7816 EUVD-2026-7816 https://cve.radiocsirt.org/vuln/euvd-2026-7816 https://cve.radiocsirt.org/vuln/fkie_cve-2023-7038 <p>A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown processing of the file /dashboard?controller=UserCollection::createUser of the component User Creation Handler. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248687. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.</p> <p>A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown processing of the file /dashboard?controller=UserCollection::createUser of the component User Creation Handler. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248687. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-7038 https://cve.radiocsirt.org/vuln/ghsa-4j8w-p6hv-3qxc <p><strong>Affected:</strong> Packagist: automad/automad</p> <p>automad up to 1.10.9 does not implement anti-CSRF tokens by default, making it vulnerable Cross-Site Request Forgery (CSRF). An attacker may exploit this vulnerability to force an admin into creating or deleting users. An exploit has been disclosed publicly.</p> <p><strong>Affected:</strong> Packagist: automad/automad</p> <p>automad up to 1.10.9 does not implement anti-CSRF tokens by default, making it vulnerable Cross-Site Request Forgery (CSRF). An attacker may exploit this vulnerability to force an admin into creating or deleting users. An exploit has been disclosed publicly.</p> https://cve.radiocsirt.org/vuln/ghsa-4j8w-p6hv-3qxc https://cve.radiocsirt.org/vuln/gsd-2023-7038 gsd-2023-7038 https://cve.radiocsirt.org/vuln/gsd-2023-7038