8.8
CVE-2025-65593
- EPSS 0.28%
- Veröffentlicht 16.12.2025 00:00:00
- Zuletzt bearbeitet 19.12.2025 16:38:29
- CVE-Watchlists
- Unerledigt
nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nopcommerce ≫ Nopcommerce Version4.90.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.28% | 0.205 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
https://www.nopcommerce.com/
https://seclists.org/fulldisclosure/2025/Dec/20
http://seclists.org/fulldisclosure/2025/Dec/20