CVE-2023-0642 MEDIUM

CVE-2023-0642: Cross-Site Request Forgery (CSRF) in squidex/squidex

Vendor Squidex

Product squidex/squidex

Weakness CWE-352 · CSRF

Published February 2, 2023

Last update March 26, 2025

CVSS base score

6.8/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0.

Key dates

February 2, 2023 CVE published

March 26, 2025 Record updated

External resources

Related vulnerabilities