Cross-Site Request Forgery (CSRF) in builderio/qwik
CVE-2023-2307

4.7MEDIUM

Key Information:

Vendor: Builderio
Status: Builderio/qwik
Vendor: CVE Published:; 26 April 2023

🔔 Create Builderio Vulnerability Alert

What is CVE-2023-2307?

Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.

Affected Version(s)

builderio/qwik < 0.104.0

References

https://huntr.dev/bounties/204ea12e-9e5c-4166-bf0e-fd49c8...

https://github.com/BuilderIO/qwik/pull/3862/commits/09190...

CVSS V3.1

Score:

4.7

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 26, 2023
Vulnerability Reserved
Apr 26, 2023

CVE-2023-2307 Data

.