CVE-2023-33409 - Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php

MEDIUM

Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php

Published Jun 5, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.39%

Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37572		Advisory
https://github.com/Thirukrishnan/CVE-2023-33409		ExploitThird Party Advisory
https://github.com/minical/minical		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 5, 2023

Updated Jan 8, 2025

Reserved May 22, 2023

Updated Jan 8, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jun 5, 2023

Updated Jan 8, 2025

Exploited since n/a