{ "id": "CVE-2024-25808", "sourceIdentifier": "cve@mitre.org", "published": "2024-03-22T04:15:11.087", "lastModified": "2024-03-22T12:45:36.130", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function." }, { "lang": "es", "value": "Vulnerabilidad de Cross-site Request Forgery (CSRF) en Lychee versi\u00f3n 3.1.6, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de la funci\u00f3n de creaci\u00f3n de nuevo \u00e1lbum." } ], "metrics": {}, "references": [ { "url": "https://github.com/Hebing123/cve/issues/17", "source": "cve@mitre.org" } ] }