Flashzyc

**Name of the Vulnerable Software and Affected Versions** Flask-MonitoringDashboard versions prior to 5.0.3 **Description** An issue in an unknown functionality allows for remote cross-site request forgery (CSRF), a type of attack that forces an authenticated user to execute unwanted actions on a web application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** imhamzaazam ecommerceFlask versions prior to cb7d9e24c30a99379651b7493b32048126ef402b **Description** A remote manipulation of an unknown function allows for Cross-Site Request Forgery (CSRF), a type of attack that forces an authenticated user to execute unwanted actions on a web application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** newbee-ltd newbee-mall (affected versions not specified) **Description** A flaw exists in newbee-ltd newbee-mall. This issue involves a function within the Multiple Endpoints component that can be exploited to perform cross-site request forgery. Remote exploitation is possible. The exploit has been publicly released. The project was notified of the issue but has not yet responded. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.