Skip to content
OpenAdvisories
High · 8.3 CVE-2024-25808 EUVD-2024-23116GHSA-386g-6xm2-mvq6

Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create n…

Published Mar 22, 2024 · Updated Sep 6, 2024 · Assigned by mitre

Description

Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.

References