NukeViet Cross-Site Request Forgery (CSRF)

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-13156 · ADVISORY
• nukeviet/nukeviet · PACKAGE
• nukeviet.vn/en · WEB
• exploit-db.com/exploits/48489 · WEB
• nukeviet.vn/en · Vendor Advisory

nukeviet/nukeviet のその他の脆弱性

• CVE-2026-55372高 7.2NukeViet: Pre-authentication SSRF via X-Forwarded-Host
• CVE-2026-54065高 8.7NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function
• CVE-2026-54064高 8.7NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module
• CVE-2026-49259高 8.7NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2026-48118高 8.2NukeViet: Unauthenticated Reflected XSS in Comment Module