CVE-2019-14933EUVD-2022-476211.08.2019, 21:15Bagisto 0.1.5 allows CSRF under /admin URIs.CSRFEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary8.8 HIGHNETWORKLOWNONECVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HBase ScoreCVSS 3.xEPSS ScorePercentile: 33%Affected Products (NVD)VendorProductVersionwebkulbagisto0.1.5𝑥= Vulnerable software versionsKnown Exploits!https://github.com/bagisto/bagisto/issues/750https://github.com/bagisto/bagisto/issues/750Common Weakness EnumerationCWE-352 - Cross-Site Request Forgery (CSRF)The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.Referenceshttps://forums.bagisto.com/category/1/announcementshttps://github.com/bagisto/bagisto/issues/750https://forums.bagisto.com/category/1/announcementshttps://github.com/bagisto/bagisto/issues/750