CWE-352 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-352 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2016-6277NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7…99.8%높음8.8● 실제 악용이 확인됨CVE-2025-62593Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development t…60.2%심각9.4● 실제 악용이 확인됨CVE-2014-100005Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with f…43.5%높음8.0● 실제 악용이 확인됨CVE-2008-4128Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in C…33.9%보통4.3● 실제 악용이 확인됨CVE-2023-2533A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, unde…28.8%높음8.8● 실제 악용이 확인됨CVE-2020-10181goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrar…14.9%심각9.8CVE-2026-75743Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability …1.5%높음7.1CVE-2026-75779Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross…1.2%높음8.6
전체 목록
120건
CVE-2026-56660GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.…0.5%심각9.1
CVE-2026-116838A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forge…0.4%높음8.8
CVE-2026-85547A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections bei…0.3%보통6.2
CVE-2026-111120The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery i…0.3%높음8.8
CVE-2026-54642CubeCart is an ecommerce software solution. Prior to 6.7.5, the reset_id download-counter action and delete_ca…0.3%보통5.3
CVE-2026-119426phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to e…0.3%높음7.7
CVE-2026-81090The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor va…0.3%높음7.2
CVE-2026-61826Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in…0.3%심각10.0
CVE-2026-82380Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to…0.3%높음8.1
CVE-2026-77058boneIO Black is vulnerable to Cross-Site Request Forgery (CSRF) on all state-changing API endpoints because it…0.3%보통5.1
CVE-2026-58497Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tool…0.3%높음8.6
CVE-2026-95658MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedAct…0.3%보통6.9
CVE-2026-84077IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross…0.3%높음8.1
CVE-2026-82712Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulne…0.2%높음8.6
CVE-2026-90905Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store…0.3%높음7.2
CVE-2026-19535Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI adminis…0.2%높음8.6
CVE-2026-114719Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-…0.2%낮음3.7
CVE-2026-88061career-ops is an open-source AI-assisted job search and application management tool. Prior to 0.8.0, the caree…0.2%보통5.8
CVE-2026-84084IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross…0.3%높음8.8
CVE-2026-64947A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker…0.3%높음7.5
CVE-2026-93531A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a…0.2%낮음2.1
CVE-2026-113796Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior …0.2%보통4.2
CVE-2026-94220Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An …0.2%낮음2.1
CVE-2026-52777YesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injectio…0.2%심각9.4
CVE-2026-52823Kimai is an open-source time tracking application. Prior to 2.58.0, TimesheetController exposes GET /api/times…0.2%보통5.3
CVE-2026-116052A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown …0.2%보통5.3
CVE-2026-56662GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.…0.2%심각9.6
CVE-2026-87449Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a …0.2%보통4.3
CVE-2026-80355Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Cross-Site Request Forgery (CSRF)…0.2%보통5.4
CVE-2026-78083Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endp…0.2%높음7.1
CVE-2026-108800A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such…0.2%보통5.3
CVE-2026-108909A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functi…0.2%낮음2.1
CVE-2026-54510Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-…0.2%높음7.1
CVE-2026-94404MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’…0.2%높음7.1
CVE-2026-103420Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.50.2%높음7.2
CVE-2026-85236A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint …0.2%높음8.8
CVE-2026-100873A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb9…0.2%낮음2.1
CVE-2026-120207Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attacke…0.2%높음7.0
CVE-2026-85546MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality.…0.2%높음8.6
CVE-2026-95362Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker lever…0.2%높음8.8
CVE-2026-34189Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged G…0.2%보통5.9
CVE-2026-92383A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function U…0.2%낮음2.1
CVE-2026-93456django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py,…0.2%높음8.4
CVE-2026-81920Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page…0.2%낮음2.3
CVE-2026-81897In Concrete CMS below CMS 9.5.3, the save_control action in the Express entities forms dashboard controller di…0.2%높음7.7
CVE-2026-40857WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi co…0.2%높음8.4
CVE-2026-68532Concrete CMS 9.0.0 to dashboard group type controller did not validate a CSRF token on its delete action, resu…0.2%낮음2.3
CVE-2026-111988A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown funct…0.2%보통5.3
CVE-2026-81907Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express "Clear Entries"…0.2%보통6.1
CVE-2026-86066Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-…0.2%보통5.9
CVE-2026-115494A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allow…0.2%보통5.3
CVE-2026-56732Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, vulnerability in Zammad's …0.2%보통5.3
CVE-2026-90893MISP contains a Cross-Site Request Forgery (CSRF) vulnerability in the UserSettingsController. The actions set…0.2%보통5.1
CVE-2026-78084Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 …0.2%보통6.9
CVE-2026-81902Concrete CMS 9 through 9.5.2 did not validate a CSRF token in the orphaned block removal panel action (removeO…0.2%높음7.1
CVE-2026-85131The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processi…0.2%보통6.5
CVE-2026-50025Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.…0.2%보통6.9
CVE-2026-106216Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remo…0.2%미평가
CVE-2026-61593djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance.…0.2%높음8.1
CVE-2026-93873Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing at…0.2%보통5.3
CVE-2026-93870Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attacker…0.2%보통5.3
CVE-2026-114177Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cro…0.2%높음8.8
CVE-2026-81924Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in the theme page-template activa…0.2%낮음2.1
CVE-2026-108553OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that all…0.2%높음7.7
CVE-2026-107809Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a brow…0.2%높음8.8
CVE-2026-5702Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an a…0.2%보통4.8
CVE-2026-116863Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cros…0.2%심각9.6
CVE-2026-86718WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vuln…0.2%높음7.1
CVE-2026-84178Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Cam…0.2%보통6.1
CVE-2026-88872AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerabi…0.2%높음7.1
CVE-2025-15399IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnera…0.2%심각10.0
CVE-2026-112836Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Fo…0.2%높음8.8
CVE-2026-107831Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perfo…0.2%보통5.3
CVE-2026-91857Affected versions of MISP expose several state-changing controller actions without restricting them to POST. T…0.2%보통5.3
CVE-2026-116210Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that al…0.2%높음7.1
CVE-2026-112374FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint…0.2%보통5.1
CVE-2026-114662Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthent…0.2%높음8.6
CVE-2026-84312Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GetCasdoorUri uses the configured C…0.2%높음7.1
CVE-2026-86467Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication respon…0.2%미평가
CVE-2026-45141Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the `add`, `delete_gradebook_from_sk…0.2%보통6.5
CVE-2026-92751CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state…0.2%높음7.2
CVE-2026-92806phpList versions before 3.6.17 fail to validate cross-site request forgery tokens in the mass subscriber remov…0.2%높음7.2
CVE-2026-81919Concrete CMS below 9.5.3 did not validate an anti-CSRF token on the block-arrangement backend endpoint (the ar…0.2%낮음2.3
CVE-2026-68526Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controlle…0.2%보통5.3
CVE-2026-102784Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController us…0.2%높음8.7
CVE-2026-90903Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in…0.2%높음7.2
CVE-2026-111883Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop…0.2%보통5.3
CVE-2026-107127The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-res…0.2%높음7.5
CVE-2026-65566Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request For…0.2%높음8.8
CVE-2026-116399Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site R…0.2%높음8.8
CVE-2026-90599A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. …0.2%낮음2.1
CVE-2026-61687Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. Prior to …0.2%높음7.1
CVE-2026-86307A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f6…0.2%낮음2.1
CVE-2026-102787Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.50.2%보통5.3
CVE-2026-82911Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus…0.2%보통5.1
CVE-2026-118266Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOverride middleware accepts a safe HTTP me…0.2%보통5.3
CVE-2026-76856Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the …0.2%높음7.0
CVE-2026-61671WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the …0.2%높음8.1
CVE-2026-18425Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action (Concrete\Controller\Backend\Dashb…0.2%낮음2.1
CVE-2026-85289InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1…0.2%보통6.5
CVE-2026-85274InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1…0.2%보통6.5
CVE-2026-81912Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The…0.2%보통5.7
CVE-2026-91819Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF an…0.2%보통6.9
CVE-2026-86182A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of t…0.2%낮음2.1
CVE-2026-86281A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination Syste…0.2%낮음2.1
CVE-2026-41875Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft spe…0.2%보통6.9
CVE-2026-86135A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature…0.2%높음7.0
CVE-2026-49992Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain authenticated cross-site r…0.2%보통6.3
CVE-2026-90900Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in…0.2%보통5.3
CVE-2026-115796A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component…0.2%낮음2.1
CVE-2025-70517The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource prote…0.2%높음8.8
CVE-2025-70522The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource prote…0.2%높음8.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.