CVE-2022-0515 MEDIUM

CVE-2022-0515: Cross-Site Request Forgery (CSRF) in crater-invoice/crater

Vendor Crater-Invoice
Product crater-invoice/crater
Weakness CWE-352 · CSRF
Published March 21, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4.

Key dates

02Disclosure timeline

March 21, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-9599 Tectite Forms <= 1.3 - Cross-Site Request Forgery to Settings Update CVE-2026-8940 WP Meta Sort Posts <= 0.9 - Cross-Site Request Forgery to Plugin Settings Update CVE-2016-20067 WordPress CP Polls 1.0.8 Cross-Site Request Forgery CVE-2026-57690 WordPress Werkstatt theme <= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2022-47150 WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability