CVE-2023-36256: online_examination_system_project online_examination_system Cross-Site Request Forgery (CSRF)
Vulnerability summary
CVE-2023-36256 is a medium (CVSS 6.5) Cross-Site Request Forgery (CSRF) vulnerability in online_examination_system_project online_examination_system. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 31% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 07-07-2023PublishedVulnerability first disclosed.
- 13-11-2024Last modifiedVulnerability information updated.
Description
The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is passed as a parameter in the URL, which can be manipulated by the attacker. This could result in a loss of data.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.38%
Chance of exploitation in the next 30 days
Percentile
31%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.38% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundOnline Examination System Project 1.0 - Cross-site request forgery (CSRF)
Maturity: poc
Exploit Reference (hackersnotes.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Online_examination_system_project1 product
1 vendor · 1 product