PoC Index

CVE-2023-47014

MEDIUM 6.5EPSS 0.3%

A Cross-Site Request Forgery (CSRF) vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to add-note.php.

CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.34% chance of exploitation in the next 30 days, 27th percentile
Published
2023-11-22
Updated
2024-08-02

Proof-of-concept exploits (1)

References

Related