CyberSecBulletin

Ledgersmb vulnerabilities

We track 1 vulnerability in Ledgersmb products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 2, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Ledgersmb vulnerabilities

  • 7.5 High severity

    LedgerSMB: Cross-Site Request Forgery

    CVE-2024-23831Ledgersmb

    LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an attacker can trick the admin into clicking on a link which automatically submits a request to setup.pl without the admi