CVE-2023-2307

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

VendorProductVersions
builderiobuilderio/qwik>= unspecified, < 0.104.0

References

Timeline

Published
Apr 26, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-230736.1Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component.CVE-2023-230746.1Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.CVE-2023-230756.1Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation.CVE-2023-230769.8OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules.CVE-2023-230776.1Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment field when adding a new status comment.CVE-2023-230786.1Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in theCVE-2023-230809.8Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CVE-2023-230824.6A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an impropCVE-2023-230869.8Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function.CVE-2023-230879.8An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function.CVE-2023-230889.8Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via thCVE-2023-23096.1The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-Sit
CVE-2023-2307: Medium severity, CVSS 6.5 | Vulnix