CVE-2025-23044 - PwnDoc Cross-Site Request Forgery (CSRF) Vulnerability

CVE ID : CVE-2025-23044
Published : Jan. 20, 2025, 4:15 p.m. | 24 minutes ago
Description : PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the missing SameSite= attribute on cookies and the ability to refresh cookies. Commit 14acb704891245bf1703ce6296d62112e85aa995 patches the issue.
Severity: 6.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...