CVE-2026-4971 MEDIUM

CVE-2026-4971: SourceCodester Note Taking App cross-site request forgery

Vendor Sourcecodester

Product Note Taking App

Weakness CWE-352 · CSRF

Published March 27, 2026

Last update March 30, 2026

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

Key dates

02Disclosure timeline

March 27, 2026 CVE published

March 30, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-4971 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/352.html

Related vulnerabilities

CVE-2026-4971: SourceCodester Note Taking App cross-site request forgery

01Description

02Disclosure timeline

03References

04Related CVE