{ "id": "CVE-2023-33534", "sourceIdentifier": "cve@mitre.org", "published": "2023-07-31T14:15:10.223", "lastModified": "2023-07-31T14:45:51.850", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goform_set_cmd_process." } ], "metrics": {}, "references": [ { "url": "https://rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696", "source": "cve@mitre.org" } ] }