猫宁i Morning Cross-Site Request Forgery Vulnerability

Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in 猫宁i Morning versions up to bc782730c74ff080494f145cc363a0b4f43f7d3e. This vulnerability allows an attacker to manipulate requests in a way that could be harmful, particularly if an administrator is logged in, potentially leading to an unauthorized increase in super administrator privileges.

Impact

Exploitation of this vulnerability could allow for unauthorized changes in user roles, specifically increasing the number of super administrators.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
7.7
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.