# csrf


- [CVE-2020-10181](https://insights.sbomify.com/CVE-2020-10181/): Sumavision EMR Cross-Site Request Forgery (CSRF) (critical 9.8, exploited in the wild)
- [CVE-2025-34291](https://insights.sbomify.com/CVE-2025-34291/): Langflow Origin Validation Error (critical 9.4, exploited in the wild)
- [CVE-2023-2533](https://insights.sbomify.com/CVE-2023-2533/): PaperCut NG/MF Cross-Site Request Forgery (CSRF) (high 8.4, exploited in the wild)
- [CVE-2008-4128](https://insights.sbomify.com/CVE-2008-4128/): Cisco IOS Cross-Site Request Forgery (high 8.1, exploited in the wild)
- [CVE-2014-100005](https://insights.sbomify.com/CVE-2014-100005/): D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) (high 8.0, exploited in the wild)
- [CVE-2025-15399](https://insights.sbomify.com/CVE-2025-15399/): Cross-site request forgery in Common Licensing (critical 10.0)
- [CVE-2025-12479](https://insights.sbomify.com/CVE-2025-12479/): Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation (critical 10.0)
- [CVE-2025-23922](https://insights.sbomify.com/CVE-2025-23922/): WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability (critical 10.0)
- [CVE-2023-45128](https://insights.sbomify.com/CVE-2023-45128/): CSRF Token Reuse Vulnerability in fiber (critical 10.0)
- [CVE-2017-5145](https://insights.sbomify.com/CVE-2017-5145/): Cross-site request forgery in Carlo Gavazzi VMU-C EM and VMU-C PV (critical 10.0)
- [CVE-2008-5184](https://insights.sbomify.com/CVE-2008-5184/): Cross-site request forgery in n/a (critical 10.0)
- [CVE-2006-6841](https://insights.sbomify.com/CVE-2006-6841/): Cross-site request forgery in n/a (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/types/csrf/