CVE-2024-39063

{"id": "CVE-2024-39063", "cveTags": [], "metrics": {}, "published": "2024-07-09T20:15:12.080", "references": [{"url": "https://github.com/sysentr0py/CVEs/tree/main/CVE-2024-39063", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is only checked when passed in the body of POST requests, but the same check isn't performed in the equivalent GET requests."}, {"lang": "es", "value": "Lime Survey &lt;= 6.5.12 es vulnerable a Cross Site Request Forgery (CSRF). YII_CSRF_TOKEN solo se verifica cuando se pasa en el cuerpo de las solicitudes POST, pero no se realiza la misma verificaci\u00f3n en las solicitudes GET equivalentes."}], "lastModified": "2024-07-11T13:06:13.187", "sourceIdentifier": "cve@mitre.org"}