CVE-2019-19685 - RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions

HIGH

RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions

Published Dec 9, 2019

8.8

HIGH

CVSS 3.1

EPSS 0.51%

RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9295		Advisory
https://github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Request-Forgery		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Dec 9, 2019

Updated Aug 5, 2024

Reserved Dec 9, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Dec 9, 2019

Updated Aug 5, 2024

Exploited since n/a