CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Feedbucket Feedbucket – Website Feedback Tool feedbucket allows Cross Site Request Forgery.This issue affects Feedbucket – Website Feedback Tool: from n/a through <= 1.0.6.
Explanation of Vulnerability in Simple Terms
Feedbucket versions up to 1.0.6 are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in Feedbucket user, performs unwanted actions on their behalf without their knowledge. The vulnerability requires user interaction—the victim must visit the attacker's page—but can result in data modification or service disruption.
What an attacker can do
Perform unwanted actions (modify data, disrupt service) on behalf of a logged-in user without their consent.
Potential impact on your site
Users' Feedbucket accounts can be manipulated to perform unintended actions if they visit malicious sites while logged in.
Conditions required to exploit
Victim must be logged into Feedbucket and visit an attacker-controlled webpage.
Key dates
External resources
