Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/Hebing123/cve/issues/17 |
![]() ![]() ![]() |
History
Wed, 28 May 2025 19:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Lycheeorg
Lycheeorg lychee |
|
CPEs | cpe:2.3:a:lycheeorg:lychee:3.1.6:*:*:*:*:*:*:* | |
Vendors & Products |
Lycheeorg
Lycheeorg lychee |
Fri, 06 Sep 2024 18:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-352 | |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: mitre
Published: 2024-03-22T00:00:00
Updated: 2024-09-06T16:17:59.477Z
Reserved: 2024-02-12T00:00:00
Link: CVE-2024-25808

Updated: 2024-08-01T23:52:06.134Z

Status : Analyzed
Published: 2024-03-22T04:15:11.087
Modified: 2025-05-28T18:44:46.340
Link: CVE-2024-25808

No data.