PT-2026-65804
CVE-2026-65947
·
Published
2026-07-29
·
Updated
2026-07-29
Description by
CVSS 3.1
7.3
HighMetricsAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Gridbox versions prior to 2.20.2
Description
Cross-Site Request Forgery (CSRF) vectors exist in the administration interface. CSRF is a type of attack that tricks a victim into submitting a malicious request. It inherits the victim's authentication and session cookies, allowing the attacker to perform actions on behalf of the user.
Recommendations
Update to version 2.20.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾