CVE-2023-52072

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-520738.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.CVE-2023-520748.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.CVE-2023-520757.5ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bcCVE-2023-520767.8Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vuCVE-2023-520779.8Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allows external apps usinCVE-2023-520796.5msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePack messages, users caCVE-2023-520807.7IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. AttackCVE-2023-520815.3ffcss is a CLI interface to apply and configure Firefox CSS themes. Prior to 0.2.0, the function `lookupPreprocess()` is meant to apply someCVE-2023-520829.8Lychee is a free photo-management tool. Prior to 5.0.2, Lychee is vulnerable to an SQL injection on any binding when using mysql/mariadb. TCVE-2023-520834.8Winter is a free, open-source content management system. Prior to 1.2.4, users with the `media.manage_media` permission can upload files toCVE-2023-520845.4Winter is a free, open-source content management system. Prior to 1.2.4, Users with access to backend forms that include a ColorPicker FormWCVE-2023-520855.4Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provid
CVE-2023-52072: High severity, CVSS 8.8 | Vulnix