What’s Vulnerable › Vulnerabilities

CVE-2023-5687: Cross-Site Request Forgery (CSRF) in mosparo/mosparo

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-10-20 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3.

Affected products

• mosparo/mosparo: before 1.0.3 — fixed in 1.0.3

How to fix

Upgrade to a fixed version: mosparo/mosparo 1.0.3. Check the vendor advisory for mitigations.

References

• https://github.com/mosparo/mosparo/commit/fb3ac528b7548beb802182310967968a21c1354a
• https://huntr.com/bounties/33f95510-cdee-460e-8e61-107874962f2d
• https://github.com/mosparo/mosparo/commit/fb3ac528b7548beb802182310967968a21c1354a
• https://huntr.com/bounties/33f95510-cdee-460e-8e61-107874962f2d

Get alerted when CVE-2023-5687 or the next vulnerability affects your stack