Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-23597 EUVD-2024-21091GHSA-94hp-7v9h-5qq9

Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, u…

Published May 1, 2024 · Updated Aug 1, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability exists in TvRock 0.9t8a. If a logged-in user of TVRock accesses a specially crafted page, unintended operations may be performed. Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a.

Affected products

VendorProductAffectedFixed
TvRock TvRock 0.9t8a —

References