| Package | Affected versions | Patched versions |
|---|---|---|
| opencats | = 0.9.6 |
Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free