CVE-2023-47014

A Cross-Site Request Forgery (CSRF) vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to add-note.php.

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.34% chance of exploitation in the next 30 days, 26th percentile

Published

2023-11-22

Updated

2024-08-02

Proof-of-concept exploits (1)

• emirhanerdogu/CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-COR…1★ · 2023-11-14

References

• CVE Record
• NVD entry