PT-2026-7158 · Placipy · Placipy
CVSS v4.0
9.3
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
PlaciPy version 1.0.0
Description
PlaciPy, a placement management system for educational institutions, does not implement CSRF protection despite enabling credentialed CORS requests in version 1.0.0. This configuration could allow malicious actors to potentially exploit cross-site request forgery attacks.
Recommendations
Implement CSRF protection mechanisms to mitigate the risk.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Placipy