csrf vulnerabilities
csrf in numbers
sbomify tracks 9,403 csrf vulnerabilities. Most are found in cms plugin (50%), web application (34%) and server software (6%).
How to fix csrf vulnerabilities
Most exploited csrf vulnerabilities
- CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF)
- CVE-2025-34291 Langflow Origin Validation Error
- CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF)
- CVE-2008-4128 Cisco IOS Cross-Site Request Forgery
- CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF)
- CVE-2025-15399 Cross-site request forgery in Common Licensing
- CVE-2025-12479 Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation
- CVE-2025-23922 WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability
- CVE-2023-45128 CSRF Token Reuse Vulnerability in fiber
- CVE-2017-5145 Cross-site request forgery in Carlo Gavazzi VMU-C EM and VMU-C PV
- CVE-2008-5184 Cross-site request forgery in n/a
- CVE-2006-6841 Cross-site request forgery in n/a
Recently published
- CVE-2026-107084 Cross-site request forgery in n/a
- CVE-2026-110008 @fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback
- CVE-2026-111883 Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset
- CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery
- CVE-2026-84178 Apache Camel: Camel-OAuth Login Cross-Site Request Forgery via Missing State Binding in the Authorization Code Flow
- CVE-2026-107618 Gitea cross-site request forgery on repository topics
Other types of vulnerability
- Cross-site scripting54,178
- Memory corruption53,628
- Denial of service36,532
- 35,428
- Missing authorization28,513
- SQL injection23,565
- Path traversal19,236
- 16,160
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.