CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five Star Restaurant Reservations: from n/a through <= 2.7.8.
Explanation of Vulnerability in Simple Terms
Five Star Restaurant Reservations versions 2.7.8 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the reservation system without the admin's knowledge or consent. This could result in unauthorized modifications to reservations or system settings.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the reservation system via a malicious webpage.
Potential impact on your site
Unauthorized changes to reservations or system configuration if an admin visits a compromised or attacker-controlled page.
Conditions required to exploit
Admin must visit a malicious webpage while logged into the site; no special privileges or complex setup required.
Key dates
External resources
Related vulnerabilities
